Secure Connection Failed When Switching Accounts Via Dashboard [firefox 46]

[linux4me2]

I'm using WHM 56 build 9. When I go Account Information -> List Accounts and click on an account's cPanel link, cPanel opens just fine. When I'm through with that account and click the Dashboard link, then use the drop-down to switch accounts, I get a "Secure Connection Failed" message with Firefox 46.0.

If I follow the same steps in Chromium, it works just fine, which makes me think the problem is with Firefox and not WHM, but unfortunately this problem started happening the same day WHM upgraded to v. 56 and Firefox upgraded to 46.0, so I'm not sure. I can't tell if there's actually an issue with WHM and Chromium is just being more lax with the secure connection, or if the problem is with Firefox.

I found this article about the error, which suggests the TLS version is out-of-date, but I'm having a hard time believing that's the case.

Does anyone have any idea how I can troubleshoot this and resolve it?

 

[jfall123]

I have 20+ servers running latest versions of either cPanel 11.54 or 11.56, all fairly new servers with typical configs.

As of a few days ago all of these servers are exhibiting the same problems, not only for me but some colleagues as well (on different computers/networks)

Connection reset errors logging in to WHM randomly:

A network error occurred during your login request. Please try again. If this condition persists, contact your network service provider. -- will say this a few times then work.

connection resets launching a cPanel from WHM randomly

connection reset launching webmail from cPanel all the time

We've narrowed it down to a possible firefox issue, we cannot duplicate any of the problems using Opera, Chrome or IE. We are using Firefox 46.0 which was recently updated a few days ago.

Couple of general troubleshooting things I've tried thus far:

- servers run CSF and modsecurity, disabled both temporarily and no change
- cleared firefox cache, tried with a new install of firefox etc. no change
- problem is occurring with accessing whm/cpanel via SSL and NON SSL
- tried on servers with 11.54 and 11.56 and issue is occurring on both
- force updated an 11.54 server to 11.56 and problem persists after

Is anyone else seeing this problem with cPanel & firefox 46.0?

 

[jfall123]

I've recently just submitted another topic regarding a very similar problem I'm seeing across many servers while using firefox 46.0

recent cPanel issue with firefox 46.0

 

[linux4me2]

I'm having an issue with a "Secure Connection Failed" message in Firefox, but not Chrome, detailed here, and have gotten some of the network error messages when trying to log into WHM (56 build 9) as well. All of this began with the update to Firefox 46.0 a couple of days ago for me.

 

[linux4me2]

I'm glad it's not just me. I cross-posted on your thread as well. I have gotten some of the network error messages when trying to log into WHM as well, but I thought it was a separate issue. Thanks for passing along the troubleshooting steps you've already taken. I'll post if I figure anything out.

 

[linux4me2]

I've found that the network error logging into WHM is intermittent, but I can reliably get the Secure Connection Failed message when trying to switch accounts from the cPanel Dashboard.

 

[cPanelMichael]

Hello

I've also reproduced the reported issue with Firefox version 46. Internal case CPANEL-5867 is open to determine if this is related to the cPanel software or if it's an issue that must be addressed by Firefox. I'll update this thread with more information as it becomes available.

Thank you.

 

[Mark Hudson]

Hello

I fixed it by resetting Firefox (backup your profile first) and from Preferences -> Advanced -> Network -> Settings, selecting "no Proxy".

I previously ran a self signed certificate on the server along with an exception which I think has something to do with the issue.
After deleting the old exception, I thought I would add another one for the current certificate but when I clicked "View Certificate Info", most of the data was wrong. The common name dated back to a time when I ran a self signed certificate.

I don't know what the problem is/was but this worked for me. Hope it helps.

 

[cPanelNick]

It appears that Firefox 46 no longer implements RFC2616 8.2.4

A change to workaround this is being tested in CPANEL-5867. Since Safari 5.1 broke in the same way we are planning on using the same fix for Firefox.

 

[MikeDVB]

It appears that Firefox 46 no longer implements RFC2616 8.2.4

A change to workaround this is being tested in CPANEL-5867. Since Safari 5.1 broke in the same way we are planning on using the same fix for Firefox.

I'm a bit curious as to how cPanel is functioning that is causing this error. From reading the RFC - isn't this something that could simply be avoided entirely by not dropping the connection unexpectedly or sending the proper header?

I would personally like to avoid random future and unexpected browser breakage. As at least two major browsers have already apparently dropped support for this RFC - why rely on it moving forward from a technical standpoint?

Ideally if cPanel is going to have custom fixes within their software for various browsers - cPanel should do their best to test all of the newest/latest browsers for compatibility and either do their best to resolve them before the customer ever sees it or works with the browser providers to resolve issues before the version is mainstream.

At the end of the day we want things to not break randomly and for no reason and I think everybody at cPanel would agree.

 

[MikeDVB]

It looks to me like RFC 2616 is no longer valid and has been obsoleted by RFC 7235.

RFC 7235 does not appear to include 8.3.4 or any variant of it.

Obsoleted by: 7230, 7231, 7232, 7233, 7234, 7235

It seems to me the best course of action would be to update cPanel to be compliant with the new RFCs as the common browsers are clearly heading that direction.

Wait and see - that said any sort of ETA on this 'work around' as we are going to have more and more customers complaining.

 

[SigmaWeb]

Is there any update on this issue?

 

[giannakidis]

Today's update 56.0.13 seems to solve it.

 

[cPanelMichael]

Hello,

The workaround for this issue is included with cPanel version 56.0.13:

Fixed case CPANEL-5867: Workaround Firefox 46.0 no longer doing RFC2616 8.2.4.

You can update cPanel via "/scripts/upcp" over the command line, or through Web Host Manager (WHM Home >> cPanel >> Upgrade to Latest Version).

You can also follow the bug submission to Firefox at:

1269055 – RFE - auto retry failed POST

Thank you.

 

[cPanelMichael]

I'm a bit curious as to how cPanel is functioning that is causing this error. From reading the RFC - isn't this something that could simply be avoided entirely by not dropping the connection unexpectedly or sending the proper header?

I would personally like to avoid random future and unexpected browser breakage. As at least two major browsers have already apparently dropped support for this RFC - why rely on it moving forward from a technical standpoint?

Ideally if cPanel is going to have custom fixes within their software for various browsers - cPanel should do their best to test all of the newest/latest browsers for compatibility and either do their best to resolve them before the customer ever sees it or works with the browser providers to resolve issues before the version is mainstream.

At the end of the day we want things to not break randomly and for no reason and I think everybody at cPanel would agree.

It looks to me like RFC 2616 is no longer valid and has been obsoleted by RFC 7235.

RFC 7235 does not appear to include 8.3.4 or any variant of it.

It seems to me the best course of action would be to update cPanel to be compliant with the new RFCs as the common browsers are clearly heading that direction.

Wait and see - that said any sort of ETA on this 'work around' as we are going to have more and more customers complaining.

Hello,

I also wanted to note that we recently filled a new position at cPanel, Community Manager, to help gather this type of feedback from our customers:

Hi. I’m benny. How can I help? | cPanel Blog

The blog post includes a couple of different contact methods you can use to reach out to our Community Manager.

Thank you.

 

[linux4me2]

Today's update 56.0.13 seems to solve it.

The 56.0.13 update has resolved this for me, too. No more network errors on WHM login and no more secure connection failed when switching cPanel accounts via the dashboard, either.

Thanks!

 

[cPanelNick]

Firefox 47 is expected to include a fix for this problem. v56.0.13 and later include a workaround for this issue. We will remove the workaround at a later date when Firefox 46 is no longer in wide use. The workaround causes an additional redirect and http roundtrip for Firefox users.

1269055 – RFE - auto retry failed POST

 

[cPanelNick]

Firefox expects to fix this in v47

POST request fails on certain sites, showing connection reset page (Regressed)

 

[Serra]

I'm now seeing this issue with IE 11 and Edge on both my servers.

 

[cPanelMichael]

I'm now seeing this issue with IE 11 and Edge on both my servers.

https://jira.cpanel.net/browse/CPANEL-6137
CPANEL-6137 should address this issue in cPanel 60:

Fixed case CPANEL-6137: Fix "network error" message in IE logging into WHM.

Another case, CPANEL-7833, is open to address an issue on IE 10/11 where the "You must specify a username to log in." message appears even when a username is supplied. I'll update this thread once that case is released.

Thank you.