Firefox "incorrect Message Authentication Code" for SSL

[moron]

Howdy. I have been fighting with this one for a while and have yet to find the cause or a solution thus my post here.

First the problem. . .

For a largish set of secure sites Firefox refuses to load them and instead gives the not so meaningful error:

"<sitename here> received a message with incorrect Message Authentication Code. If the error occurs frequently, contact the website administrator."

This appeared a while back during a system update though unfortunately I did not notice it right away so have no idea when specifically it started. As far as I can tell, this is the default error for the condition where nothing else matches.

An example site that triggers it for me is:

http://www.effectuality.com

Now the error does not happen with Konqueror when accessing the same site. I have updated the openssl libraries and this had no effect at all.

Firefox says the following with respect to the version:

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060922 Firefox/1.5.0.7

This also happened however with older versions as well.

The machine in question is:

Linux newwilly 2.6.7-gentoo-r11 i686 AMD Athlon(tm) 64 Processor 3200+ AuthenticAMD GNU/Linux

So far I have been unable to find any debug options for Fireox. When run from the console no errors appear when triggering this condition. I can access some SSL sites no problem (https://www.paypal.com/ for example). I have tried searching bugzilla.mozilla.org, USENET and the web with no obvious hits in the first and only other users experiencing the same problem in the latter two (none with any solution posted). Hopefully my luck is better!

This one is driving me nuts, especially the fact I cannot seem to get any meaningful logging out of Firefox to explain what is happening.

Any help much appreciated.

Cheers
_________________
--
---> (culture) http://industrial.org : (label) http://deterrent.net
---> (community) http://ampfea.org : (hire me) http://codegrunt.com
---> (send EEEI news to) infosuck@industrial.org
---> Whomever dies with the most URLs wins!!!!!!!!!!!!!

[moron]

As a followup, I can connect to an example problematic server if I use openssl directly:

s_client -host www.effectuality.ca -port 443

This lets me connect and issue a successful GET request so handshaking must be possible, at least with certain protocols.

Tricky one this is.

Cheers
_________________
--
---> (culture) http://industrial.org : (label) http://deterrent.net
---> (community) http://ampfea.org : (hire me) http://codegrunt.com
---> (send EEEI news to) infosuck@industrial.org
---> Whomever dies with the most URLs wins!!!!!!!!!!!!!

[lagalopex]

Have you tried the 32-bit mozilla-firefox-bin?
My firefox-bin does not display any errors...

[moron]

I can't go with the bin version at the moment as it looks like the latest firefox build (needed for security reasons) has a dependent library not available for AMD64 or something is FUBAR with (my | all of) portage:

-----------------
emerge -Dvp mozilla-firefox-bin

These are the packages that would be merged, in order:

Calculating dependencies -
!!! All ebuilds that could satisfy ">=app-emulation/emul-linux-x86-baselibs-1.0" have been masked.
!!! One of the following masked packages is required to complete your request:
- app-emulation/emul-linux-x86-baselibs-2.5.1 (masked by: missing keyword)
- app-emulation/emul-linux-x86-baselibs-2.5.2 (masked by: missing keyword)

For more information, see MASKED PACKAGES section in the emerge man page or
refer to the Gentoo Handbook.
(dependency required by "www-client/mozilla-firefox-bin-1.5.0.7" [ebuild])
-----------------

I've tried following the instructions in the handbook for dealing with the missing keyword but they seem to either be out of date or just plain wrong:

http://www.gentoo.org/doc/en/gentoo-amd64-faq.xml#keyword

----------------
echo "category/package ~x86" >> /etc/portage/package.keywords
emerge package
----------------

results in:

--------------
--- Invalid atom in /etc/portage/package.keywords: app-emulation/emul-linux-x86-baselibs-2.5.2
--- Invalid atom in /etc/portage/package.keywords: app-emulation/emul-linux-x86-baselibs-2.5.2

These are the packages that would be merged, in order:

Calculating dependencies

!!! 'app-emulation/emul-linux-x86-baselibs-2.5.2' is not a valid package atom.
!!! Please check ebuild(5) for full details.
!!! (Did you specify a version but forget to prefix with '='?)
----------------

If I add the "=" to the package name that just results in the original error when I attempt the emerge. I have also tried adding this package to "/etc/portage/package.unmask" with no luck either.

Docs seem wrong (probably why this is a FAQ!)

=)

Cheers
_________________
--
---> (culture) http://industrial.org : (label) http://deterrent.net
---> (community) http://ampfea.org : (hire me) http://codegrunt.com
---> (send EEEI news to) infosuck@industrial.org
---> Whomever dies with the most URLs wins!!!!!!!!!!!!!