1138613 - SSL Cypher error on geico.com (Error code: ssl_error_no_cypher_overlap)

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Fred Wenzel [:wenzel]]

Step to reproduce:
Visit https://geico.com/

Qualy SSL Labs report:
https://www.ssllabs.com/ssltest/analyze.html?d=geico.com&s=205.143.207.30

Comment 1

[Fred Wenzel [:wenzel]]

The site is rejected by Firefox 39.0a1 (tonight's nightly) because it doesn't support a strong enough cipher.

Comment 2

[Fred Wenzel [:wenzel]]

geico.com relies on RC4 only which is not strong enough and now whitelist-only: https://bugzilla.mozilla.org/show_bug.cgi?id=1124039

Comment 3

[Masatoshi Kimura [:emk]]

IE11 will fallback automatically like Firefox 36.

Comment 4

[Masatoshi Kimura [:emk]]

Fixed.

Comment 5

[Masatoshi Kimura [:emk]]

Wait, www.geico.com is fixed, but geico.com (without www) is not.

Comment 6

[George K.]

It appears that ecams.geico.com is also using SHA1withRSA for the signature algorithm and TLS_RSA_WITH_RC4_128_MD5 (0x4) and TLS_RSA_WITH_RC4_128_SHA (0x5) for the cypher suites.

https://www.ssllabs.com/ssltest/analyze.html?d=ecams.geico.com

Comment 7

[Masatoshi Kimura [:emk]]

Fixed.