SSL problem: fatal error (40) from server

[Frank Steiner]

Hi,

trying to access our webmail interface with Opera 9.01, I suddenly
get an error:

"Secure connection: fatal error (40) from server."

The URL is https://coltrane.tcs.ifi.lmu.de:443/
Used to work with all 8.x opera versions, still works with Firefox/Mozilla.

This is a real stopper, because I can't make any user at our chair
browse with Opera if our webmail doesn't work anymore :-)

Any settings that I can change?

cu,
Frank

--
Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/
Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/
LMU, Amalienstr. 17 Phone: +49 89 2180-4049
80333 Muenchen, Germany Fax: +49 89 2180-99-4049
* Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *

[Remco Lanting]

On Thu, 17 Aug 2006 12:52:51 +0200, Frank Steiner
<fstein...@bio.ifi.lmu.de> wrote:

> Hi,
>
> trying to access our webmail interface with Opera 9.01, I suddenly
> get an error:
>
> "Secure connection: fatal error (40) from server."
>
> The URL is https://coltrane.tcs.ifi.lmu.de:443/
> Used to work with all 8.x opera versions, still works with
> Firefox/Mozilla.
>
> This is a real stopper, because I can't make any user at our chair
> browse with Opera if our webmail doesn't work anymore :-)
>
> Any settings that I can change?

That site uses 56 bit encrytion. My suggestion: get a new email provider
fast! The reason for this is that that kind of encrytion is very easily
broken nowadays.

If you really need to access the site, you can enable this particular
encryption method:

- Go to Tool -> Preferences -> Advanced -> Security
- Click the security protocols button
- Click details
- Scroll down to "SSL3/TLS1" on the left side and "56 bit ARC4 (RSA/SHA)
Exportable" on the right side.
- Select the checkbox in between and click OK a few times.

More info about why it is disabled by default can be found here:
http://my.opera.com/yngve/blog/show.dml/382945

Remco

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

[Frank Steiner]

Remco Lanting wrote

> That site uses 56 bit encrytion. My suggestion: get a new email provider
> fast! The reason for this is that that kind of encrytion is very easily
> broken nowadays.

Unfortunately, we are restricted to this server for now. Department
is setting up a new mail system, but this will take a while...

>
> If you really need to access the site, you can enable this particular
> encryption method:
>
> - Go to Tool -> Preferences -> Advanced -> Security
> - Click the security protocols button
> - Click details
> - Scroll down to "SSL3/TLS1" on the left side and "56 bit ARC4 (RSA/SHA)
> Exportable" on the right side.
> - Select the checkbox in between and click OK a few times.

Thanks a lot!

> More info about why it is disabled by default can be found here:
> http://my.opera.com/yngve/blog/show.dml/382945

Very interesting...
Thanks for your help!