1095507 - Cannot enter on Kredobank online banking page (www.kredodirect.com.ua), when TLS non-secure fallback is disabled

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Alexander L. Slovesnik]

Steps to reproduce:

go to https://www.kredodirect.com.ua/


Actual results:

An error occurred during a connection to www.kredodirect.com.ua. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap) 


Expected results:

Show web-page of bank

Comment 1

[Alexander L. Slovesnik]

Kredobank's twitter is https://twitter.com/Kredobank_ua

Comment 2

[Masatoshi Kimura [:emk]]

This site is also TLS intolerant.

Comment 3

[Dave Garrett]

https://www.ssllabs.com/ssltest/analyze.html?d=www.kredodirect.com.ua

Server is SSL3 only & 3DES only. It's insecure and incompatible with about half of the clients listed in SSL Labs' test.

Comment 4

[Yuhong Bao]

Now uses TLS 1.0, but still is TLS version intolerant.

Comment 5

[Dave Garrett]

Minor mass change for dependencies of bug 1126620.
(filter on {bf0YGqIfJDgVDlKn3zYc})

As of bug 1114816, these sites are now whitelisted to allow for insecure fallback due to TLS version intolerance. Whilst these sites should now work with the patch applied, these bugs themselves are not actually FIXED until the server is. Moving all of these into the TE product for tracking.

Comment 6

[Alex Gaynor [:Alex_Gaynor]]

This appears to be fixed.