1137543 - Several Air Canada aeroplan.com domains are RC4 only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Dietrich Ayala (:dietrich)]

Attachment: Screen Shot 2015-02-26 at 8.38.19 PM.png

Go to https://www3.aeroplan.com/enroll.do

Firefox error text:

Secure Connection Failed

An error occurred during a connection to www3.aeroplan.com. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

Comment 1

[:Cykesiopka]

https://www.ssllabs.com/ssltest/analyze.html?d=www.aeroplan.com :
https://www.ssllabs.com/ssltest/analyze.html?d=www1.aeroplan.com :
https://www.ssllabs.com/ssltest/analyze.html?d=www2.aeroplan.com :
https://www.ssllabs.com/ssltest/analyze.html?d=www3.aeroplan.com :
https://www.ssllabs.com/ssltest/analyze.html?d=www4.aeroplan.com :
> Cipher Suites (sorted by strength; the server has no preference)
> TLS_RSA_WITH_RC4_128_SHA (0x5)   WEAK		128

Comment 2

[:Cykesiopka]

I contacted Air Canada via their online feedback form. I'll comment here if they respond.
In case it's useful, the case ID is ABDA-13ZRVA0.

Comment 3

[Masatoshi Kimura [:emk]]

Fixed.