1146281 - ebank.db-pbc.pl is RC4 only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Martin]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
Build ID: 20141229214612

Steps to reproduce:

the latest version of Firefox, the certificate page (https://ebank.db-pbc.pl/auth/login.jsp) does not appear. Grey warning triangle warns of Preferably page. With other browsers and earlier versions everything works ok


Actual results:

2015-03-12 Bank exchanged for a new certificate but the problem is still present in the latest versions of Firefox browser. I checked all the possible settings for certificates. I contacted the bank.


Expected results:

Firefox fix needed to accept certified bank as in previous versions. The site should to be verifiable. Fraudsters can use a certificate that does not act on firefox> 36

Comment 1

[Loic]

The server is RC4 only:
https://www.ssllabs.com/ssltest/analyze.html?d=ebank.db-pbc.pl

Cipher Suites (sorted by strength; the server has no preference)
TLS_RSA_WITH_RC4_128_SHA (0x5) 

In FF39, you'll see:
An error occurred during a connection to ebank.db-pbc.pl. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

Comment 2

[Martin]

Thanks Loic!

Comment 3

[Loic]

If you want, you can contact their support by e-mail and redirect them to this bug report. Devs can answer them if they have some questions.

Comment 4

[Martin]

Yesterday I gave your answer to the bank. We'll see what they have to answer to me : -)
I'll let you know.

Comment 5

[Masatoshi Kimura [:emk]]

Fixed.