Arch Linux

oliver

Member

Registered: 2007-12-12

Posts: 448

firefox 36 versus firefox 37 and SSL cyphers

This is re-creatable every time

We have an internal site at work that I can only reach via a SOCKS proxy.  I ssh with "-D 8888" and then set up FF to proxy through it.

With FF36 it works perfectly but has failed since FF37 with the following error:

Secure Connection Failed

An error occurred during a connection to 10.6.100.221. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

I've it with a brand new user (and therefore new profile) but the only consistency I see is that it fails with FF37 and works with FF36

Does anyone know what specific could be toggled to make it work again?  It's an internal, non-publicly accessible site so I doubt there will ever be any updates to it but I can always request it if I can prove they're doing something bad.  I'm just not sure how to prove/verify it.

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,721

Re: firefox 36 versus firefox 37 and SSL cyphers

The only thing I see in the FF 37 release notes:
https://www.mozilla.org/en-US/security/ … sa2015-44/

YMMV

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way

oliver

Member

Registered: 2007-12-12

Posts: 448

Re: firefox 36 versus firefox 37 and SSL cyphers

Thanks for responding.
I think you've got to be right in that its related and I tried setting the following to 'true' in about:config (they were false) but still get the error

network.http.altsvc.oe
network.http.altsvc.enabled

oliver

Member

Registered: 2007-12-12

Posts: 448

Re: firefox 36 versus firefox 37 and SSL cyphers

Wonders will never cease... apparently enough people have complained and I got this email from our IT team:

We’re targeting to fix this by 4/24/2015.  Please use IE to temporary work around this issue.

Not so easy to use IE on Arch but 'pacman -U /path/to/firefox36' is good enough for me