SSL_ERROR_RX_RECORD_TOO_LONG

[rherm1321]

Participated in scheduled Zoom business meeting today on Win 10 PC using the Zoom app v5.7.4 (804) .  When it ended, there was a prompt to upgrade to the latest version of Zoom.  Got error saying the download failed.

Tried the manual download option using Firefox 92.0.1 but keep getting this error: SSL_ERROR_RX_RECORD_TOO_LONG

Tried every suggestion I could find on line but nothing helps.  I don't have -or want- another browser on this PC.  And obviously, FF worked previously to download the Zoom app since it's been installed and running properly for over a year.

Any suggestions?

Thanks!

[Rupert]

Hi @rherm1321 

Maybe you can try the non HTTPS link: 

http://zoom.us/client/5.8.0.1324/ZoomInstaller.exe?archType=x64

[Bort]

Looks like its related to Avast antivirus: https://support.mozilla.org/en-US/questions/1222739

Might follow the tips in that FF forum post. 

[rherm1321]

@Rupert  -   Get same error message using your link.

@Bort   -        Don't have Avast; only use Windows Defender (Windows Security)

I've tried changing these FF settings:

Set to TLS 1.2  instead of TLS 1.3 

Set Enhanced Tracking to Standard

Disabled Block dangerous and deceptive content

Disabled DNS over https-only mode

Cleared FF cache, cookies, history

Disabled all FF extensions

Still the same SSL error after all those changes were made.  

Any other suggestions?

Thanks, kindly...!

[Rupert]

Hi @rherm1321 

Can you try the download in a Private Browser window?

Can you also try https://zoom.us:443/client/5.8.0.1324/ZoomInstaller.exe?archType=x64 ? (note :explicit port number)

[rherm1321]

@Rupert  With all the FF changes mentioned above still in effect, opening your original link in a private window gives the same SSL length error.

Opening your new port-specific link in a "regular" window also gives the  same SSL length error, and opening it in a private window gives this new error:  SSL_ERROR_BAD_MAC_READ

Appreciate your time and input...

[rherm1321]

I found this about the bad_mac_read error with FF, but putting http://zoom.us/client/5.8.0.1324/ZoomInstaller.exe in the list of Insecure FallBack Hosts  also doesn't help...

[Rupert · Accepted solution]

I see that, in fact, the Zoom exe URL above from http://zoom.us/client/ actually redirects behind the scenes to a https://cdn.zoom.us/ URL. 

As a test - are you able to access https://cdn.zoom.us/ ? Though the base URL only returns an Access Denied XML page, it should still validate the SSL - or maybe not in your case? This would be a good test.

If you're problem is getting to cdn.zoom.us, maybe this need adding to any whitelist you may have - or maybe there are some other restrictions to that URL or hostname for you.

cdn.zoom.us seems to resolve to Cloudflare for me.

Could there be any restriction in place on your network or in your location?

[rherm1321]

@Rupert  Went to https://cdn.zoom.us/ and got the Access Denied page with no SSL errors.  Win 10 on my PC is configured to use Cloudflare DNS.  No restrictions on my network or location.  I'm in US and have fiber optic broadband. 

After I tried the cdn.zoom.us link, I tried the Zoom download link again this morning and it worked!  Pity I didn't try the download link before trying the cdn link.  Maybe just going to the cdn link validated the SSL and allowed me to access the download.   Or, did Zoom have a website issue that got fixed overnight..?

And for the record, I undid all the FF settings changes listed in my OP last night before shutting down.  So  all my strict settings were in place this morning when I got the download to work today.  

Appreciate your time and efforts! 

[Rupert]

Hi @rherm1321 

You're welcome. I'm glad we were able to get there in the end - even if it was in a roundabout way.

Please click on Accept as Solution if you feel we got to a satisfactory solution!

Thank you,

Rupert

[rherm1321]

Still don't understand what changed, but if this SSL problem in FF pops up again, suggest going to the cdn site and then trying the update site again. 

And for the record, the download link is still working this morning.  Amazing!  😃