Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

FF and "ssl_error_unsupported_version" (not v34 issue!)

2,627 views
Skip to first unread message

R.S.

unread,
Jul 13, 2015, 9:45:11 AM7/13/15
to mozilla-sup...@lists.mozilla.org
Hello,
I have the following error when trying to connect to old embedded system
(IBM HMC).
(It's in Polish)
---------------------------------------
Nie udało się nawiązać bezpiecznego połączenia

Bezpieczeństwo danych wymienianych z „10.25.2.100” nie jest gwarantowane
ponieważ serwer używa SSLv3, wadliwego protokołu bezpieczeństwa.
---------------------------------------
ssl_error_unsupported_version
---------------------------------------

Note: first time I noticed similar problems with FF v34, but then I
circumvented it by setting:
security.tls.version.fallback-limit – change from 1 to 0
security.tls.version.min – change from 1 to 0

The message then was slightly different: „ssl_error_no_cypher_overlap”


Now I use FF v39, but I'm not 100% sure when the problem was
reintroduced. Of course I still have the "0" in the configuration
entries above.


Q: how can I circumvent it?
Is there any other magical switch in the about:config?

Regards
--
Radoslaw Skorupka
Lodz, Poland




Christian Riechers

unread,
Jul 13, 2015, 4:01:32 PM7/13/15
to mozilla-sup...@lists.mozilla.org
On 07/13/2015 03:44 PM, R.S. wrote:
> Hello,
> I have the following error when trying to connect to old embedded system
> (IBM HMC).
> (It's in Polish)
> ---------------------------------------
> Nie udało się nawiązać bezpiecznego połączenia
>
> Bezpieczeństwo danych wymienianych z „10.25.2.100” nie jest gwarantowane
> ponieważ serwer używa SSLv3, wadliwego protokołu bezpieczeństwa.
> ---------------------------------------
> ssl_error_unsupported_version
> ---------------------------------------
>
> Note: first time I noticed similar problems with FF v34, but then I
> circumvented it by setting:
> security.tls.version.fallback-limit – change from 1 to 0
> security.tls.version.min – change from 1 to 0
>
> The message then was slightly different: „ssl_error_no_cypher_overlap”
>
>
> Now I use FF v39, but I'm not 100% sure when the problem was
> reintroduced. Of course I still have the "0" in the configuration
> entries above.
>
>
> Q: how can I circumvent it?

You can't. SSLv3 support has been removed in FF39.
https://developer.mozilla.org/en-US/Firefox/Releases/39/Site_Compatibility#Security

> Is there any other magical switch in the about:config?

No.

> Regards

0 new messages