Error code: sec_error_pkcs11_device_error
After upgraded my Firefox to version 27, I cannot access to my email server which is installed with 2048bit SSL certificate. The error message as follow:
Secure Connection Failed
An error occurred during a connection to mail.tarc.edu.my. A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. (Error code: sec_error_pkcs11_device_error)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
I can access the same site from other browsers such as Internet Explorer and Chrome. Please advise. Thank you very much.
Wšykne wótegrona (12)
Hello,
Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache. Note: This will temporarily log you out of all sites you're logged in to. To clear cache and cookies do the following:
- Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
- Under "Time range to clear", select "Everything".
- Now, click the arrow next to Details to toggle the Details list active.
- From the details list, check Cache and Cookies and uncheck everything else.
- Now click the Clear now button.
Further information can be found in the Clear your cache, history and other personal information in Firefox article.
Did this fix your problems? Please report back to us!
Thank you.
However, I have tested on a few devices, including computers and smart phones, all cannot access to the mentioned website via Firefox version 27. The same website can be accessed from Internet Explorer, Chrome, and even older version Firefox. Please advise.
Can you provide the website you are trying to visit? Also, are you visiting via a bookmark or are you manually typing it in?
Thanks!
Hi, https://mail.tarc.edu.my I have tried bookmark and manually enter the URL also getting the same result.
Can you trying logging in with http://mail.tarc.edu.my/index1.html and tell us if it works?
Hi, But http://mail.tarc.edu.my/index1.html is not using secure connection which is not fulfill our requirement.
Looks like a problem with one of the SSL cipher suites.
It works if I disable security.ssl3.dhe_rsa_des_ede3_sha = false on the about:config page.
mail.tarc.edu.my: Connection Encrypted: High-grade Encryption (SSL_RSA_WITH_3DES_EDE_CBC_SHA, 112 bit keys)
With also security.ssl3.rsa_des_ede3_sha = false I get:
mail.tarc.edu.my: Connection Encrypted: High-grade Encryption (SSL_RSA_WITH_RC4_128_SHA, 128 bit keys)
In that case either of these can be used:
security.ssl3.rsa_rc4_128_md5 security.ssl3.rsa_rc4_128_sha
With all three of them set to false then I get ssl_error_no_cypher_overlap, so it looks that the server has very old software running and needs to update their support to include more modern cipher suites.
Wót cor-el
cor-el, leeyy,
This is reproducible and I can access the page by switching the security.ssl3.dhe_rsa_des_ede3_sha to false in about:config.
Hi, tried and it works. But is that mean I have to ask all the users to change this setting at Firefox if they want to access to my server? And, any implication after changed this?
Try to contact the hosting company and ask them to upgrade the server software.
Server: Apache/1.3.27 OS: Unix Mods: mod_ssl/2.8.12 OpenSSL/0.9.6g
This looks like software from 2002 or earlier:
Wót cor-el
Hi, we are using Solaris 10 to host this service. Kindly advise what do you mean "it looks that the server has very old software running and needs to update their support to include more modern cipher suites."? Is that mean I need to install certain server patch to upgrade the system software version? What's the recommended SSL cipher suites?
Hey leeyy, with the recent heartbleed issue with openssl, please take the precautions of the encryption that you are having issues with.
The error you are receiving came out in NSS 3.12.2
Version needed: https://developer.mozilla.org/en-US/d.../PKCS11_FAQ If the above information does not resolve your issue, please consider creating a new thread containing the specific details of your issue.
Doing so will allow the Mozilla volunteers to give you solutions that are more helpful to you. This may help them to solve your problem faster and more efficiently.
Please, feel free to post the link to your thread on this thread for volunteers interested in assisting you.
Thank you.