Secure Connection Failed - Getting Ridiculous

[Ryan P.]

Okay, I know I've posted on this before, but I'm starting to think it
CAN'T be universal, or else LOTS more people would be posting...

Today, links (from email) to tigerdirect.com listings give me the error.
When I try to log in to my sprint.com account, I get the error
(sprint.com itself works fine, just when trying to login to my account
to I get the error). I still get frequent errors on Amazon.com.

This is the one:

"An error occurred during a connection to mysprint.sprint.com. Cannot
communicate securely with peer: no common encryption algorithm(s).
(Error code: ssl_error_no_cypher_overlap)"

I've tried forcing sslv3 through about:config
(security.tls.version.max =0, tls.version.min = 0 and
tls.version.fallback-limit=1) and it doesn't seem to help.

All these sites work fine on IE and Chrome.

What am I missing to enable access to these sites?

[Wolf K.]

Try checking the URLs at http://validator.w3.org/

Firefox is less tolerant of errors than the other two browsers.

HTH

--
Best,
Wolf K.
kirkwood40.blogspot.ca

[WaltS48]

Did you try in Safe Mode? A new profile?

--
Kubuntu 15.04 | KDE 4.14.8 | Thunderbird 38.0.1 Go Bucs!
[Visit Pittsburgh](http://www.visitpittsburgh.com/)
[2015 EQT Pittsburgh Three Rivers Regatta](http://www.yougottaregatta.com/)
One users useless feature, is a useful feature to other another

[Ryan P.]

Amusing discovery: Firefox blocks my access to palemoon.org with the
same error... as if they don't want me to try another browser!

So I half-soved my problem. Starting in safe-mode allowed me to
access some sites that were being blocked before (such as
support.mozilla.org), but not all. I did a total refresh, and so far I
seem to NOT have the issue anymore.

Now I'm confused, because I thought Refresh was supposed to remove all
add-ons and extensions, but none were removed except for Ghostery. I
reinstalled Ghostery, and everything is working fine.

I can only assume something else in about:config must have gotten
changed somehow to break https...

Sheesh!

[»Q«]

In
<news:mailman.599.1434985044...@lists.mozilla.org>,

"Ryan P." <rdelet...@gerasemail.com> wrote:

> "An error occurred during a connection to mysprint.sprint.com. Cannot
> communicate securely with peer: no common encryption algorithm(s).
> (Error code: ssl_error_no_cypher_overlap)"
>
> I've tried forcing sslv3 through about:config
> (security.tls.version.max =0, tls.version.min = 0 and
> tls.version.fallback-limit=1) and it doesn't seem to help.

In about:config, enter "/security.ssl|security.tls/" (without the
quotes but with the slashes) into the search box and reset them all to
default.

[Christian Riechers]

mysprint.sprint.com supports TLS 1.0, so trying to enforce SSL 3.0 is a
complete waste of time.
In addition the CAs in the chain of trust only use SHA1 as hashing
algorithm for their certs, but that wouldn't prevent Firefox from
connecting to the server (yet).
https://www.ssllabs.com/ssltest/analyze.html?d=mysprint.sprint.com

My best guess is you've been messing with some settings in about:config
and screwed up.

[Ryan P.]

On 6/22/2015 2:26 PM, Christian Riechers wrote:

> mysprint.sprint.com supports TLS 1.0, so trying to enforce SSL 3.0 is a
> complete waste of time.
> In addition the CAs in the chain of trust only use SHA1 as hashing
> algorithm for their certs, but that wouldn't prevent Firefox from
> connecting to the server (yet).
> https://www.ssllabs.com/ssltest/analyze.html?d=mysprint.sprint.com
>
> My best guess is you've been messing with some settings in about:config
> and screwed up.

That is completely possible. I'm fully capable of admitting I might
have messed something up. :) The only thing that makes me doubt that
somewhat is that HTTPS completely broke "overnight" without any changes
made on my part. I'd been having problems with a few sites for the past
few weeks... And then suddenly all HTTPS broke.

I *DID* update Firefox... maybe the update is less tolerant of
whatever I screwed up than previous versions. They did make some pretty
significant UI changes (all the settings are now web-based rather than a
standalone options box).

Either way, things seem to be almost back to normal. I'm now getting
more crashes than before, but that's something else I'll have to
diagnose. Probably Shockwave related again.

Thanks for the info!

Ryan