Код ошибки ssl error bad mac alert

Перейти к содержимому

How to Resolve Firefox Error ‘SSL_Error_Bad_Mac_Alert’?

The ‘ssl_error_bad_mac_alert‘ error typically occurs in Mozilla Firefox when affected users attempt to visit certain secured websites. In some cases, the error appears when the user attempts to send emails via the IMAP interface to Gmail.

Mozilla Firefox ssl_error_bad_mac_alert Error

We have analysed several user reports to find potential causes – as it turns out, this issue can occur due to the fact that a certain SSL check is failing, forcing the browser to throw this error and restrict the user from accessing the website. In this case, you can resolve the issue easily by accessing the advanced Firefox Preference menu and adding the website to the list of Insecure FallBack Hosts.

Another potential cause that might lead to this browser behavior is a network connection that ends up blocking communications between your browser and external servers. In this case, you can fix the issue by performing a power-cycling procedure on your router or modem, forcing your network to start fresh.

One scenario that might force your browser to invalidate SSL certificates and throw this error, as a result, is an incorrect system-wide time & date. Several users encountering the same problem have reported that they finally managed to resolve the issue after they accessed the Date and Time settings and updated the values accordingly.

It turns out that certain older machine configurations will need a certain Firefox advanced setting advanced in order to be able to connect to SSL3 web-servers without errors. If this scenario is applicable, you can fix the issue by accessing the Advanced Preferences tab and setting the value of security.ssl3 to True.

1. Adding Website to the list of Insecure FallBack Hosts

If you’re certain that the SSL website where you’re encountering the issue is completely secure, you can prevent the SSL_Error_Bad_Mac_Alert from ever appearing again by accessing the Mozilla Firefox config files and adding the secure SSL to the list of Insecure FallBack Hosts.

This will except the website you trust from the SSL check that was previously causing the issue. A lot of affected users have confirmed that this procedure is what allowed them to get rid of the issue indefinitely.

IMPORTANT: This should only be attempted with an SSL secured website that you completely trust. Do not add questionable websites to the list of Insecure FallBack Hosts.

If you understand the security risks and you’re prepared to add the website to the Firefox list of Insecure FallBack Hosts, follow the instructions here:

1. Open up your Mozilla Firefox browser, type ‘about:config‘ in the navigation bar and press Enter to open up the Advanced Preferences menu.
2. When you see the Proceed with Caution prompt, click on Accept the Risk and Continue.
3. Once you’re inside the Advanced Preferences menu, paste security.tls.insecure_fallback_hosts into the navigation bar and press Enter to find the setting preference.
4. When the results show up, click on the Edit icon associated with security.tls.insecure_fallback_hosts entry (right-hand section).
5. In the newly appeared text box, simply enter the website URL that you’re encountering the issue with and hit Enter.
6. Restart your Mozilla Firefox browser and see if the issue is resolved at the next program startup.

Adding the SSL secured website as Fallback host

In case you’re still encountering the same security.tls.insecure_fallback_hosts error or you’re looking for an approach that will not expose your system to any security risks, move down to the next potential fix below.

2. Power-Cycling the Router / Modem

As it turns out, this particular issue can also occur due to a network inconsistency. It’s possible that your current network state is stuck in a limbo state. This might block your PC ability to communicate with external web servers through your browser.

If this scenario is applicable, you can most likely fix the issue by performing a power-cycling procedure on your router. This operation should not be confused with a router reset. Opposite from a reset, this will not affect your credentials and any previously established.

To initiate a power-cycling procedure, press the ON / OFF button and leave the network device turned off at least 30 seconds or more. If you want to make sure that the operation is a success, also disconnect the power cable from your power outlet. This will force your network to start fresh at the next router/modem startup.

Restarting your router/modem

Note: Do not confuse the power button with the reset button. The reset button will reset every previously established network settings and custom credentials.

If you already did this and you’re still encountering the same issue, move down to the next potential fix below.

3. Setting the Correct time & Date

As it turns out, another reason that might make your Mozilla Firefox throw the security.tls.insecure_fallback_hosts error is an inconsistent date & time. This might invalidate the security certificate, forcing your browser to interrupt the connection.

If this scenario is applicable, you can fix the issue by accessing your Date & time settings and modifying the values to the current values. Several affected users encountering the same issue have confirmed that this operation finally stopped the error message from appearing.

1. Open up a Run dialog box by pressing Windows key + R. Next, type ‘timedate.cpl’ and press Enter to open the Date and time windows. Opening the Date and time window
2. Once you manage to get inside the Date & Time window, navigate to the Date and Time tab and click on Change date and time. Setting the correct date & time
3. Inside the Date and Time window, use the provided calendar to set the appropriate Date and Time values. Modifying Time & date
4. Once the modifications have been completed, restart your computer and visit the same website ad the next startup sequence to see if the issue is resolved.

In case you’re still encountering the same ‘ssl_error_bad_mac_alert‘ error, move down to the next potential fix below.

4. Setting Security.SSL3 to TRUE

If you’re encountering the issue with an old machine that is not publicly exposed, you might get the ‘ssl_error_bad_mac_alert‘ error with a lot of valid SSL web servers until you find the time to access Firefox’s Advanced Preferences and enable Security.SSL3.

In case you noticed that the error suddenly started occurring after Firefox updated itself, chances are you’re encountering the problem due to the fact that Security.SSL3 is disabled by default.

Here’s a quick guide on ensuring that Security.SSL3 is enabled on your Firefox browser:

1. Open your Firefox browser, type ‘about:config‘ and press Enter to access the Advanced Preferences menu.
2. When you see the ‘Proceed with Caution‘ prompt, click on the Accept the Risk and Continue button.
3. Inside the Advanced Preferences menu, use the search menu at the top to search for security.ssl3 and press Enter to see the results.
4. Once the results are in, scroll down to the bottom fo the screen and locate security.ssl3.
   Note: If you have the option to choose from a string, boolean and float, choose boolean.
5. Next, ensure that the value of security.ssl3 is set to true, then save the modifications and restart your Mozilla Firefox browser.
6. Visit the same website that was previously displaying the ‘ssl_error_bad_mac_alert‘ error and see if the issue is now resolved.

Enabling Security.SSL3 via Advanced Preferences

Источник

Ssl error bad mac alert firefox

I’m trying to download an attachment on email, and get:

An error occurred during a connection to ne1-attach.mail.yahoo.com.

SSL received a record with an incorrect Message Authentication Code.

I’m using mac mini with 10.10.1

Please help. Thanks.

Выбранное решение

That specific error code is somewhat rare in forum threads. Past solutions may have included (sometimes it’s hard to tell which suggestion helped):

• Disabling Firefox from using IPv6 (see that topic in: Firefox can’t load websites but other browsers can)
• Checking for a proxy setting in the Options dialog: «3-bar» menu button (or Tools menu) > Options > Advanced > Network mini-tab > «Settings» button — try «No Proxy»
• Fixing a flaky internet connection
• Removing some extensions (e.g., MaskMe and an old version of DoNotTrackMe)

Прочитайте этот ответ в контексте 👍 0

Все ответы (3)

Is there a reason you are using an old version of Firefox?

Many site issues can be caused by corrupt cookies or cache.

• Clear the Cache and

• Remove Cookies Warning ! ! This will log you out of sites you’re logged in to.

Type about:preferences in the address bar.

• Cookies; Select Privacy. Under History, select Firefox will Use Custom Settings. Press the button on the right side called Show Cookies. Use the search bar to look for the site. Note; There may be more than one entry. Remove All of them.
• Cache; Select Advanced > Network. Across from Cached Web Content, Press Clear Now.

If there is still a problem, Start Firefox in Safe Mode While you are in safe mode;

Type about:preferences#advanced in the address bar.

Under Advanced, Select General. Look for and turn off Use Hardware Acceleration.

Poke around safe web sites. Are there any problems?

Источник

Ssl error bad mac alert firefox

I’m also having this issue with more and more users. They are all work from home

We tried the following:

The only solution so far is to migrate the user to Chrome Browser instead But we would rather avoid that if possible..

Изменено 29 апреля 2022 г., 07:11:40 -0700 Nestea

I should clarify that I tried all of the solutions except for disabling AV (Sophos), which I cannot do. If you know of a different way to check if the AV software is causing the issue, I would be happy to try it.

The solution outlined here did temporarily resolve the issue:

However, the issue is occurring today again. Interestingly, reverting that change temporarily resolved the issue again. So it seems that just changing that setting refreshes something to alleviate the issue, but then it will still come back after some time.

If you know of a different way to check if the AV software is causing the issue . . .

Start your Computer in safe mode with network support. Then start Firefox. Try Secure websites. Is the problem still there?

https://www.digitalcitizen.life/4-ways-boot-safe-mode-windows-10/ +++++++++++++++++++++++++++++++++++++++++++++++ If the problem goes away with the computer in Safe Mode, the problem is with one of the other programs on the system.

As a test, disable your protection programs.

If you know of a different way to check if the AV software is causing the issue . . .

I can confirm that the issue does not occur is safe mode. I also, ran process monitor and do see Sophos performing operations on Firefox files when the issue is active.

It seems that updating any of the security.tls* parameters in Firefox will temporarily resolve the issue. I tested changing a few other random settings, but that did not resolve the issue. It seems that changing any of the security.tls* parameters clears some sort of cached information that might be corrupt.

Выбранное решение

This could be a problem with the TLS 1.3 Early Data feature also known as Zero Round Trip Time Resumption (0rtt). You can try to set security.tls.enable_0rtt_data = false on the about:config page to disable this feature until this is fixed by Google or Mozilla to see if that helps.

• /questions/1376015 Issue with most Google sites on Firefox v100 64bit

The issue has not occurred again since setting security.tls.enable_0rtt_data = false.

Same problem here. Disabling Sophos Intercept X Essentials (temporarily) solves the problem.

Other browser, Microsoft Edge, no problem at all.

Источник

Ssl error bad mac alert firefox

I sure would like to solve this. I was using Safari on my 2008 Mac and then it became outdated on some websites so I switched to Firefox. I am using a wireless connection supplied by the RV park that we are in with a password. I must use Safari to log in then I can use Firefox once that I am connected. (Firefox 38.0.1). Is there some way to disable whatever security line is causing this problem. I also use Firefox on a windows7 laptop from time to time with no problems. So far this is the only problem that I have found since installing Firefox on the Mac.

Chosen solution

I understand that it also does work on other browsers, but there may or may not be an issue with the network.

If the service has some form of security, the ssl might be the issue. This error came up a bit when they changed the security policy in Firefox in the last two versions. If you are interested in the details, check out the blog here and the new security certificate: https://www.mozilla.org/en-US/about/g. /policy/

There were two work arounds to narrow down which one it was:

security.tls.version.fallback-limit = 1 In order to change your Firefox Configuration please do the following steps :

1. In the Location bar, type about:config and press Enter. The about:config «This might void your warranty!» warning page may appear.
2. Click I’ll be careful, I promise! to continue to the about:config page.
3. search for fallback, doubleclick on the entry and change 3 to 1.

I am not sure how your internet is setup, you could try to change the dns server in your computer settings to 8.8.8.8 which is Google’s open dns server. (DNS is like a phonebook for websites)

Hi Peon, To check the theory where a security setting is an issue, is it possible to share a screenshot of the security information of the webpage from the working Windows 7 machine?

The Encryption information on this menu: Right click on the webpage > Select «Show Page Info» > Click on the Security Tab

If you have a url, we can test and troubleshoot this together, however if it is network dependent please also contact your network administrator.

Sorry but I have been gone for a week. Well I also made a mistake in the original question. The Windows7 machine will not log in either with Firefox but will work with Explorer. Interesting that Safari and Explorer will work but Firefox on either of the computers will not. It may in fact be the wireless network in the RV park but they will not admit to it. Everybody that is using a Mac is using Safari and all the Windows machines are using Explorer or Chrome and here I am using what I like. Really there must me something I can change to get it to work.

More info: I did look at the network login and it is not encrypted. I examined it with Firefox when it would not work just to see if I could see anything strange. Firefox did post a caution that it was not encrypted and that someone could see what I was doing. Once that I am on the network with Safari or Explorer and then go back and look at it now the network is encrypted. Don’t know whether that will help to solve the problem but I am at wits end.

Chosen Solution

I understand that it also does work on other browsers, but there may or may not be an issue with the network.

If the service has some form of security, the ssl might be the issue. This error came up a bit when they changed the security policy in Firefox in the last two versions. If you are interested in the details, check out the blog here and the new security certificate: https://www.mozilla.org/en-US/about/g. /policy/

There were two work arounds to narrow down which one it was:

security.tls.version.fallback-limit = 1 In order to change your Firefox Configuration please do the following steps :

1. In the Location bar, type about:config and press Enter. The about:config «This might void your warranty!» warning page may appear.
2. Click I’ll be careful, I promise! to continue to the about:config page.
3. search for fallback, doubleclick on the entry and change 3 to 1.

I am not sure how your internet is setup, you could try to change the dns server in your computer settings to 8.8.8.8 which is Google’s open dns server. (DNS is like a phonebook for websites)

Источник

Недавно пришлось настраивать относительно старый сервер HP Gen 7. При попытке открыть веб страницу веб интерфейса настройки сервера ILO (iLO2), в Google Chrome появилась ошибка:

В Internet Explorer эта страница также не отображается: Internet Explorer не может отобразить эту веб страницу.

Я проверил доступность интерфейса веб сервера ILO с помощью Port Query. Сайт отвечает на 80 и 443 TCP порту. Значит дело не в сетевых настройках и файерволе.

Изучив более подробно ошибку ERR_SSL_BAD_RECORD_MAC_ALERT в Google Chrome, я разобрался, что это связано с тем, что в Chrome отключена поддержка устаревших и уязвимых протоколов SSL/TLS 1.0.

Попробуем включить поддержку этих протоколов в IE. Откройте настройки Internet Explorer.

Перейдите на вкладку Advanced и в секции Security снимите галки у опции Use TLS 1.0, 1.1 и 1.2 и оставьте только SSL 2.0 и 3.0.

После этого перезапустите IE и попробуйте открыть веб страницу управления ILO. Она должна открыться нормально.