Closed Bug 1184106 Opened 5 years ago Closed 4 years ago

cisco-global-returns.com sends Error code: ssl_error_weak_server_ephemeral_dh_key

Categories

(Web Compatibility :: Desktop, defect)

Firefox 39
defect
Not set

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: oooforum, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
Build ID: 20150624141335

Steps to reproduce:

Unable to access with https://www.cisco-global-returns.com/ciscologin/ website. 


Actual results:

The error message displayed is:
Secure Connection Failed

An error occurred during a connection to www.cisco-global-returns.com. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)



Expected results:

This problem occurs only with ESR 31.8.0
No problem with Firefox 39.0
I can't access to this website with FF39. It works on your machine probably because the SSL cert is cached.

Log:
https://www.ssllabs.com/ssltest/analyze.html?d=cisco-global-returns.com

This SSL server really needs upgrades.
Component: Untriaged → Desktop
Product: Firefox → Tech Evangelism
Summary: ESR 31.8 only: weak ephemeral Diffie-Hellman key → cisco-global-returns.com sends Error code: ssl_error_weak_server_ephemeral_dh_key
Version: 31 Branch → Firefox 39
(In reply to Loic from comment #1)
> I can't access to this website with FF39. 
Did you read my previous comment:
>This problem occurs _only_ with *ESR 31.8.0*
>No problem with Firefox 39.0
Whatever, FF31 is near EOL and this website cannot be reached with F39 due to the security compatibilty I linked.

Cisco needs to fix its webserver.
My fault, URL is wrong
Could you test this: h**ps://zimbra.ville-thouars.fr:7071/
(In reply to Bidouille from comment #5)
> My fault, URL is wrong
> Could you test this: h**ps://zimbra.ville-thouars.fr:7071/

Works fine on 41. Since the Cisco site is still broken, I will leave this bug open.
Status: UNCONFIRMED → NEW
Ever confirmed: true
(In reply to Cykesiopka from comment #6)
> Works fine on 41. 
Read my 1st description: this problem occurs *only* with ESR.

I update today with ESR 38.2.0 and no more problem.
Set status to resolved
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
Let's this bug open about the issue concerning the website https://www.cisco-global-returns.com/ciscologin/ which is not solved.
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
Fixed.
Status: REOPENED → RESOLVED
Closed: 5 years ago4 years ago
Resolution: --- → FIXED
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.