Cannot login to forums in Firefox: Secure Connection Failed

[MTonly 0]

I cannot currently log-in (sign-in) to Codemasters forums using Firefox browser: once I click the "Sign In" link at the top of forums' page, Firefox shows me the "Secure Connection Failed" page and suggests to report this error to Firefox developers. So I'm forced to use another browser to use Codies' forums for now.

[justbiglee 0]

MTonly said:

I cannot currently log-in (sign-in) to Codemasters forums using Firefox browser: once I click the "Sign In" link at the top of forums' page, Firefox shows me the "Secure Connection Failed" page and suggests to report this error to Firefox developers. So I'm forced to use another browser to use Codies' forums for now.

Sorry to hear that, we've not changed anything so no idea how that has happened. Can you access accounts.codemasters.com ok?

[VirtuaIceMan 92]

I just tried FireFox 35.0.1 on my work Win7 64bit machine, and it works fine, I'm posting from FireFox now :smile: 

[VirtuaIceMan 92]

Actually, if you go to: http://forums.codemasters.com/ it'll work, but the secure https one won't: https://forums.codemasters.com - it errors the https one on Chrome too, so are you using the https link by any chance?

[MTonly 0]

justbiglee said:

Sorry to hear that, we've not changed anything so no idea how that has happened. Can you access accounts.codemasters.com ok?

@justbiglee: accounts.codemasters.com (FWIW, http url is redirected to https one anyway) is exactly the problematic domain that a user is redirected to when trying to sign-in. It shows the "Secure Connection Failed" error including cases when the root of the domain is loaded directly (i.e. not just via sign-in link).

Looks like the issue takes place in Firefox 37+ while older Firefox 36 works fine.

Firefox 37 is currently in beta and will be released on March 31, 2015. The new version contains several changes as for dealing with secure connections (and the Codies forums' issue is probably related to one of them), namely:

• Disabled insecure TLS version fallback for site security.
• Extended SSL error reporting for reporting non-certificate errors.
• TLS False Start optimization now requires a cipher suite using AEAD construction.

So it's just 11 days until this issue affects many regular users of Firefox. It's probably up to Codemasters' web-developers to take measures to fix the issue. Thanks.

[justbiglee 0]

MTonly said:

justbiglee said:

Sorry to hear that, we've not changed anything so no idea how that has happened. Can you access accounts.codemasters.com ok?

@justbiglee: accounts.codemasters.com (FWIW, http url is redirected to https one anyway) is exactly the problematic domain that a user is redirected to when trying to sign-in. It shows the "Secure Connection Failed" error including cases when the root of the domain is loaded directly (i.e. not just via sign-in link).

Looks like the issue takes place in Firefox 37+ while older Firefox 36 works fine.

Firefox 37 is currently in beta and will be released on March 31, 2015. The new version contains several changes as for dealing with secure connections (and the Codies forums' issue is probably related to one of them), namely:

• Disabled insecure TLS version fallback for site security.
• Extended SSL error reporting for reporting non-certificate errors.
• TLS False Start optimization now requires a cipher suite using AEAD construction.

So it's just 11 days until this issue affects many regular users of Firefox. It's probably up to Codemasters' web-developers to take measures to fix the issue. Thanks.

I'll pass it on to them - thank you :)

[MTonly 0]

Firefox 37 final is released. Given that Firefox is updated automatically, all regular users of Firefox are now (or will be in several days as Firefox is updated) unable to login to Codemasters' forums.

[B0B 0]

https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/ is this the reason?
i can post in this forum, but if i want to check my https://racenet.codemasters.com/  (racenet page) i get the TLS error

[Davesdream 0]

Is anybody going to take care of this problem? It is April 20th and still not able to login using Firefox. Following Firefox explanation says Racenet web admin is responsible to update his TLS certificate. Now, Why I can have access if I use Cyberfox (64bit) browser?

[joepineapples 0]

Run into this myself now.  Any workaround besides the obvious alternate browser?.

[Rapster 1]

Nothing doing, other than use another browser for now.

Codies, give your webmasters a kick up the backside and get this fixed! Firefox 37.0.2 and not able to log on:

Secure Connection Failed

The connection to accounts.codemasters.com was interrupted while the page was loading.

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

Please...

[bamber 0]

My 2 penneth.. exactly the same for me, nothing codemasters is accessible if you try log in using firefox, all other browsers I've tried have been fine!

[Davesdream 0]

I found out what the problem is, and Codemasters.com webmaster is responsible of this. The page is using and old TLS 1.0 cryptographic protocol when it should be TLS 3.
Firefox is set up to use TLS 3, that's why you get the Connection Failed error. One walk around is to type "about:config" in your Firefox address bar. When asked if are you're sure to proceed click "I'll be carefull.." button. On the Search box type "tls". From the resulting list double-click "security.tls.version.fallback-limit" the value you have should be "3". Change the value to "1". Restart Firefox and you should be able to load the page normally.
I recommend to change the value back to "3" when you finish using Codemasters site because TLS 1.0 has secure vulnerabilities and you don't want to be browsing the web with this setting.

[MTonly 0]

Looks like the issue is fixed. I'm now able to log-in using Firefox 38.0.5 and 39 beta.

[Superd00ps 0]

I just updated to 38.0.5 and no change,...unless I use Davesdream to login.

[BRACHIFER 0]

@justbiglee,
I've been having a slightly different issue accessing both the forum and 'racenet' websites since Oct/Nov 2014. Basically, I used to get an error as shown in the first attached image. I accidentally found out recently, it was my security software blocking access to the sites. As you can see in the second image, I have to uncheck "scan ssl" option to get the sites working. In other words, every time I refresh the racenet page or access a different page on the site, the SSL option needs to stay unchecked. If not I get the same error.

I did contact your customer service and also my security software support at the time to no avail. I do not have this issue with any other websites.

I've also noticed this warning about "obsolete cryptography" on the connection information tab (third image), although it appears on most other sites too. Not sure if this is related to the above SSL issue.

Hope you can look in to it :)

http://imgur.com/QHBhxlL,A2oYQge,4iIwWu4

[NellyFurtado 20]

All you have to do is clear cookies. Like a Maneater

[BRACHIFER 0]

@NellyFurtado Not sure if you were replying to me. Clearing cookies has nothing to do with my issue. It's clearly a website issue (something to do with the soon-to-be obsolete SSL). Also, the site uses TLS 1.0 as already mentioned.

And, whatever Maneater happens to be. :p

[mesa 624]

Any news for the Firefox users? Are you still working on your trouble, Codemasters?

On FF website:

Firefox recently removed support for some outdated, insecure versions of TLS. You should contact the owners of the website to ask them to upgrade to a newer version. Other browsers also plan to remove support for these versions in the future as well.

Other browsers also plan to remove support  - soon  no one will able to connect to your Racenet.com
Hurry up!

[SkiddyMcCrash 311]

Weird, it crashed last week, but was back up the next day. That's the only time that I haven't been able to access it, and I use Firefox.

Screencap

[mesa 624]

@SkiddyMcCrash Please try https://racenet.codemasters.com/

[SkiddyMcCrash 311]

Ahh yeah, that ones an error

[mesa 624]

I already post to a thread on 8th of May, no one answered yet

BUG: Can't play league because your site unavailable for FF

FF 38.0 is my default Browser and i can't play in League (it doesn1t  matter, because Racenet also down fora while) ...

[Zombie 14]

The problem has been fixed since. i can log in from firefox and other browsers.