I am trying to authenticate using my USB smartcard reader to a website.
I am running Ubuntu 10.04 LTS, with its most up to date Firefox browser 3.6.24.
I get the following error message:
Secure Connection Failed
An error occurred during a connection to www.socialsecurity.be.
SSL peer was unable to negotiate an acceptable set of security parameters.
(Error code: ssl_error_handshake_failure_alert)
- The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
- Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
Now of course there are multiple potential problems, so I looked them up to try different configurations and settings (at a certain point SSL was modified due to a previously unknown attack)
Note that the error message seems selfcontradicting: either there was a mismatch between security parameters acceptable to the server and those acceptable to my setup, or data was sent but I miss a certificate or data was corrupted such that the hash is not the same as the one in the signature,...
Is it possible to display the mismatch of security parrameters? Is it possible to display the signature and the entity it refers to such that I can check if I have the certificate or if there's a new one or ...?
In theory I could start to debug mozilla, but I am not in the mood to start debugging a huge complex software like mozilla if somebody else can give me a tip on how to identify the real problem (other than that the error message has been standardized and prettyfied beyond all recognition).
Authentication is supposed to rely on the Belgian eID add-on (1.0.14) for FireFox. I have openjre and icedtea.
Since this is more of a question about mozilla firefox I thought unix/linux was more suitable than Ubuntu, mod's feel free to move if necessary.