Bug 1566832

Summary: Firefox/Chrome ssl connection timeouts
Product: Red Hat Enterprise Linux 7 Reporter: adam winberg <adam.winberg>
Component: nssAssignee: nss-nspr-maint <nss-nspr-maint>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.5CC: kengert
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-13 12:28:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description adam winberg 2018-04-13 05:35:27 UTC
Description of problem:
Since upgrading to 7.5, we are experiencing intermittent problems where both Firefox and Chrome are unable to connect via https. http works fine. Normally everything works fine when we start the browser, and then after some time the problem arises. If we have both browsers running at the same time, the problem usually arise on both at the same time, but sometimes only in one. 

We ran the 7.5 beta and had no such problems at all. Looking through the list of packages updated between the beta and the release, and since this is clearly SSL related, I'm thinking this has something to do with NSS. 

We use smartcards for authentication, both in GDM and in several different web applications. That could maybe be a factor in this, and maybe this is related to:
https://bugzilla.redhat.com/show_bug.cgi?id=1557015

However, that issue was present in the beta, and as I said, our problem started immediately after upgrading 7.5_beta -> 7.5. No problems in beta!

The problem is present in both Firefox and Google Chrome, and also in the standalone Slack app (which is built on Electron which is based on Chromium).



Version-Release number of selected component (if applicable):
3.10.0-862.el7.x86_64
nss-3.34.0-4.el7.x86_64
opensc-0.16.0-8.20170227git777e2a3.el7.x86_64
firefox-52.7.3-1.el7_5.x86_64
google-chrome-stable-65.0.3325.181-1.x86_64



How reproducible:


Steps to Reproduce:
1. Start Firefox and/or Chrome
2. Go about your day
3.

Actual results:
After a while, https content times out in browser

Expected results:
https content not timing out. 

Additional info:

Comment 2 Kai Engert (:kaie) (inactive account) 2018-04-13 12:28:04 UTC
Thanks for the report. There is a known issue with the NSS package in RHEL 7.5.0. This bug is probably a duplicate of bug 1557015.

*** This bug has been marked as a duplicate of bug 1557015 ***