1187215 - *.eur.xerox.com sites are TLS 1.1/1.2 intolerant

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Soothsayer]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0
Build ID: 20150630154324

Steps to reproduce:

Go to site https://eppns3.eur.xerox.com/irj/portal



Actual results:

I get a "Secure connection failed" error due to site requiring insecure fallback to RC4.


Expected results:

I should have got a login page.

If I add the domain to 'security.tls.insecure_fallback_hosts', then it works. However, there are a *lot* of sub domains to 'eur.xerox.com ', all of which exhibit this problem and we therefore need the wildcard '*.eur.xerox.com' added to the whitelist.

If it is not possible to use a wildcard, then I can obtain and provide a full list of sub-domains.

Comment 1

[Soothsayer]

Attachment: Full list of sub-domains affected

Comment 2

[Soothsayer]

I have now attached a full list of the affected sub-domains.

Please note the problem hardware is not expected to be replaced until Q2 2016.

Comment 3

[Loic]

https://www.ssllabs.com/ssltest/analyze.html?d=eppns3.eur.xerox.com
They offer TLS_RSA_WITH_3DES_EDE_CBC_SHA too.

The main issue is probably the TLS intolerance.

Comment 4

[Masatoshi Kimura [:emk]]

Looks like this is fixed.