firefox 3.6.9 fails to connect due to SSL DHE

firefox 3.6.9 fails to connect due to SSL DHE

am 24.09.2010 04:03:38 von Ricardo Stella

------=_Part_93219_1187874253.1285293818271
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit



Hello,

The latest Firefox 3.6.9+ will fail to connect to a server using the SSL DHE key exchange. I guess my server is using this (I do have a commercial certificate). Basically Mozilla says it's a server misconfiguration issue. Anyone knows what needs to be configured so this doesn't happen?

TIA.



------=_Part_93219_1187874253.1285293818271
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit


Hello,

The latest Firefox 3.6.9+ will fail to connect to a server using the SSL DHE key exchange.  I guess my server is using this (I do have a commercial certificate).  Basically Mozilla says it's a server misconfiguration issue.  Anyone knows what needs to be configured so this doesn't happen?

TIA.



------=_Part_93219_1187874253.1285293818271--

RE: firefox 3.6.9 fails to connect due to SSL DHE

am 24.09.2010 11:35:07 von Jackie.Wong

--_000_A171E013BA199C4ABD13540D0D634E370103925092LDNPCMMGMB0 1I_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGF2ZSB5b3UgdHJpZWQgc3dpdGNoaW5nIG9mZiBFREggdXNpbmcgdGhlIFNT TENpcGhlclN1aXRl
IGRpcmVjdGl2ZSBpbiB0aGUgYXBhY2hlIGNvbmZpZz8NCg0KRnJvbTogUmlj YXJkbyBTdGVsbGEg
W21haWx0bzpzdGVsbGFAcmlkZXIuZWR1XQ0KU2VudDogRnJpZGF5LCBTZXB0 ZW1iZXIgMjQsIDIw
MTAgMzowNCBBTQ0KVG86IHVzZXJzQGh0dHBkLmFwYWNoZS5vcmcNClN1Ympl Y3Q6IFt1c2Vyc0Bo
dHRwZF0gZmlyZWZveCAzLjYuOSBmYWlscyB0byBjb25uZWN0IGR1ZSB0byBT U0wgREhFDQoNCg0K
SGVsbG8sDQoNClRoZSBsYXRlc3QgRmlyZWZveCAzLjYuOSsgd2lsbCBmYWls IHRvIGNvbm5lY3Qg
dG8gYSBzZXJ2ZXIgdXNpbmcgdGhlIFNTTCBESEUga2V5IGV4Y2hhbmdlLiAg SSBndWVzcyBteSBz
ZXJ2ZXIgaXMgdXNpbmcgdGhpcyAoSSBkbyBoYXZlIGEgY29tbWVyY2lhbCBj ZXJ0aWZpY2F0ZSku
ICBCYXNpY2FsbHkgTW96aWxsYSBzYXlzIGl0J3MgYSBzZXJ2ZXIgbWlzY29u ZmlndXJhdGlvbiBp
c3N1ZS4gIEFueW9uZSBrbm93cyB3aGF0IG5lZWRzIHRvIGJlIGNvbmZpZ3Vy ZWQgc28gdGhpcyBk
b2Vzbid0IGhhcHBlbj8NCg0KVElBLg0KDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fDQoNClRoaXMgZS1tYWlsIG1heSBjb250YWlu IGluZm9ybWF0aW9u
IHRoYXQgaXMgY29uZmlkZW50aWFsLCBwcml2aWxlZ2VkIG9yIG90aGVyd2lz ZSBwcm90ZWN0ZWQg
ZnJvbSBkaXNjbG9zdXJlLiBJZiB5b3UgYXJlIG5vdCBhbiBpbnRlbmRlZCBy ZWNpcGllbnQgb2Yg
dGhpcyBlLW1haWwsIGRvIG5vdCBkdXBsaWNhdGUgb3IgcmVkaXN0cmlidXRl IGl0IGJ5IGFueSBt
ZWFucy4gUGxlYXNlIGRlbGV0ZSBpdCBhbmQgYW55IGF0dGFjaG1lbnRzIGFu ZCBub3RpZnkgdGhl
IHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIGl0IGluIGVycm9yLiBV bmxlc3Mgc3BlY2lm
aWNhbGx5IGluZGljYXRlZCwgdGhpcyBlLW1haWwgaXMgbm90IGFuIG9mZmVy IHRvIGJ1eSBvciBz
ZWxsIG9yIGEgc29saWNpdGF0aW9uIHRvIGJ1eSBvciBzZWxsIGFueSBzZWN1 cml0aWVzLCBpbnZl
c3RtZW50IHByb2R1Y3RzIG9yIG90aGVyIGZpbmFuY2lhbCBwcm9kdWN0IG9y IHNlcnZpY2UsIGFu
IG9mZmljaWFsIGNvbmZpcm1hdGlvbiBvZiBhbnkgdHJhbnNhY3Rpb24sIG9y IGFuIG9mZmljaWFs
IHN0YXRlbWVudCBvZiBCYXJjbGF5cy4gQW55IHZpZXdzIG9yIG9waW5pb25z IHByZXNlbnRlZCBh
cmUgc29sZWx5IHRob3NlIG9mIHRoZSBhdXRob3IgYW5kIGRvIG5vdCBuZWNl c3NhcmlseSByZXBy
ZXNlbnQgdGhvc2Ugb2YgQmFyY2xheXMuIFRoaXMgZS1tYWlsIGlzIHN1Ympl Y3QgdG8gdGVybXMg
YXZhaWxhYmxlIGF0IHRoZSBmb2xsb3dpbmcgbGluazogd3d3LmJhcmNhcC5j b20vZW1haWxkaXNj
bGFpbWVyLiBCeSBtZXNzYWdpbmcgd2l0aCBCYXJjbGF5cyB5b3UgY29uc2Vu dCB0byB0aGUgZm9y
ZWdvaW5nLiAgQmFyY2xheXMgQ2FwaXRhbCBpcyB0aGUgaW52ZXN0bWVudCBi YW5raW5nIGRpdmlz
aW9uIG9mIEJhcmNsYXlzIEJhbmsgUExDLCBhIGNvbXBhbnkgcmVnaXN0ZXJl ZCBpbiBFbmdsYW5k
IChudW1iZXIgMTAyNjE2Nykgd2l0aCBpdHMgcmVnaXN0ZXJlZCBvZmZpY2Ug YXQgMSBDaHVyY2hp
bGwgUGxhY2UsIExvbmRvbiwgRTE0IDVIUC4gIFRoaXMgZW1haWwgbWF5IHJl bGF0ZSB0byBvciBi
ZSBzZW50IGZyb20gb3RoZXIgbWVtYmVycyBvZiB0aGUgQmFyY2xheXMgR3Jv dXAuDQpfX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K

--_000_A171E013BA199C4ABD13540D0D634E370103925092LDNPCMMGMB0 1I_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwi IHhtbG5zOm89InVy
bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6 dz0idXJuOnNjaGVt
YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDov L3NjaGVtYXMubWlj
cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDov L3d3dy53My5vcmcv
VFIvUkVDLWh0bWw0MCI+DQoNCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj1D b250ZW50LVR5cGUg
Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5h bWU9R2VuZXJhdG9y
IGNvbnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDEyIChmaWx0ZXJlZCBtZWRpdW0p Ij4NCjxzdHlsZT4N
CjwhLS0NCiAvKiBGb250IERlZmluaXRpb25zICovDQogQGZvbnQtZmFjZQ0K CXtmb250LWZhbWls
eToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250
LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAz
IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglw YW5vc2UtMToyIDEx
IDYgNCAzIDUgNCA0IDIgNDt9DQogLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CiBwLk1zb05vcm1h
bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207 DQoJbWFyZ2luLWJv
dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1p bHk6IlRpbWVzIE5l
dyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5r DQoJe21zby1zdHls
ZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlv bjp1bmRlcmxpbmU7
fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21z by1zdHlsZS1wcmlv
cml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQpw
DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltYXJnaW46MGNtOw0KCW1h cmdpbi1ib3R0b206
LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJU aW1lcyBOZXcgUm9t
YW4iLCJzZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29u
YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm IjsNCgljb2xvcjp3
aW5kb3d0ZXh0Ow0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxl Om5vcm1hbDsNCgl0
ZXh0LWRlY29yYXRpb246bm9uZSBub25lO30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10
eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24x
DQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIu MHB0IDcyLjBwdCA3
Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9u MTt9DQotLT4NCjwv
c3R5bGU+DQo8IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCiA8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0
PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUg
bXNvIDldPjx4bWw+DQogPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0K ICA8bzppZG1hcCB2
OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCiA8L286c2hhcGVsYXlvdXQ+PC94 bWw+PCFbZW5kaWZd
LS0+DQo8L2hlYWQ+DQoNCjxib2R5IGxhbmc9RU4tVVMgbGluaz1ibHVlIHZs aW5rPXB1cnBsZT4N
Cg0KPGRpdiBjbGFzcz1Xb3JkU2VjdGlvbjE+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBz
dHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYi
Jz5IYXZlDQp5b3UgdHJpZWQgc3dpdGNoaW5nIG9mZiBFREggdXNpbmcgdGhl IFNTTENpcGhlclN1
aXRlIGRpcmVjdGl2ZSBpbiB0aGUgYXBhY2hlDQpjb25maWc/PG86cD48L286 cD48L3NwYW4+PC9w
Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9u
dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIic+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+
PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2IHN0eWxlPSdib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlk
ICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSc+DQoN CjxwIGNsYXNzPU1z
b05vcm1hbD48Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiVGFo
b21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3Bhbg0Kc3R5 bGU9J2ZvbnQtc2l6
ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4g UmljYXJkbyBTdGVs
bGENClttYWlsdG86c3RlbGxhQHJpZGVyLmVkdV0gPGJyPg0KPGI+U2VudDo8 L2I+IEZyaWRheSwg
U2VwdGVtYmVyIDI0LCAyMDEwIDM6MDQgQU08YnI+DQo8Yj5Ubzo8L2I+IHVz ZXJzQGh0dHBkLmFw
YWNoZS5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW3VzZXJzQGh0dHBkXSBm aXJlZm94IDMuNi45
IGZhaWxzIHRvIGNvbm5lY3QgZHVlIHRvIFNTTCBESEU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQoN
CjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+ Jm5ic3A7PC9vOnA+
PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21hcmdp
bi1ib3R0b206MTIuMHB0Jz48c3BhbiBzdHlsZT0nY29sb3I6YmxhY2snPjxi cj4NCkhlbGxvLDxi
cj4NCjxicj4NClRoZSBsYXRlc3QgRmlyZWZveCAzLjYuOSsgd2lsbCBmYWls IHRvIGNvbm5lY3Qg
dG8gYSBzZXJ2ZXIgdXNpbmcgdGhlIFNTTCBESEUNCmtleSBleGNoYW5nZS4m bmJzcDsgSSBndWVz
cyBteSBzZXJ2ZXIgaXMgdXNpbmcgdGhpcyAoSSBkbyBoYXZlIGEgY29tbWVy Y2lhbA0KY2VydGlm
aWNhdGUpLiZuYnNwOyBCYXNpY2FsbHkgTW96aWxsYSBzYXlzIGl0J3MgYSBz ZXJ2ZXIgbWlzY29u
ZmlndXJhdGlvbg0KaXNzdWUuJm5ic3A7IEFueW9uZSBrbm93cyB3aGF0IG5l ZWRzIHRvIGJlIGNv
bmZpZ3VyZWQgc28gdGhpcyBkb2Vzbid0IGhhcHBlbj88YnI+DQo8YnI+DQpU SUEuPGJyPg0KPGJy
Pg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KDQo8L2Rpdj4NCg0KPC9kaXY+ DQoNCjwvZGl2Pg0K
DQoNCjxGT05UIGZhY2U9QXJpYWwgc2l6ZT0yPg0KPFAgY2xhc3M9TXNvTm9y bWFsIA0Kc3R5bGU9
Ik1BUkdJTjogMGluIDBpbiAwcHQ7IG1zby1sYXlvdXQtZ3JpZC1hbGlnbjog bm9uZSI+PFNQQU4g
DQpzdHlsZT0iRk9OVC1TSVpFOiAxMXB0Ij48Rk9OVCANCmZhY2U9IlRpbWVz IE5ldyBSb21hbiI+
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X188P3htbDpuYW1l
c3BhY2UgDQpwcmVmaXggPSBvIG5zID0gInVybjpzY2hlbWFzLW1pY3Jvc29m dC1jb206b2ZmaWNl
Om9mZmljZSIgDQovPjxvOnA+PC9vOnA+PC9GT05UPjwvU1BBTj48L1A+DQo8 UCBjbGFzcz1Nc29O
b3JtYWwgDQpzdHlsZT0iTUFSR0lOOiAwaW4gMGluIDBwdDsgbXNvLWxheW91 dC1ncmlkLWFsaWdu
OiBub25lIj48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDExcHQiPjxvOnA+ PEZPTlQgDQpmYWNl
PSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvRk9OVD48L286cD48L1NQQU4+ PC9QPg0KPFAgY2xh
c3M9TXNvTm9ybWFsIA0Kc3R5bGU9Ik1BUkdJTjogMGluIDBpbiAwcHQ7IG1z by1sYXlvdXQtZ3Jp
ZC1hbGlnbjogbm9uZSI+PFNQQU4gDQpzdHlsZT0iRk9OVC1TSVpFOiAxMXB0 Ij48Rk9OVCBmYWNl
PSJUaW1lcyBOZXcgUm9tYW4iPlRoaXMgZS1tYWlsIG1heSBjb250YWluIA0K aW5mb3JtYXRpb24g
dGhhdCBpcyBjb25maWRlbnRpYWwsIHByaXZpbGVnZWQgb3Igb3RoZXJ3aXNl IHByb3RlY3RlZCBm
cm9tIA0KZGlzY2xvc3VyZS4gSWYgeW91IGFyZSBub3QgYW4gaW50ZW5kZWQg cmVjaXBpZW50IG9m
IHRoaXMgZS1tYWlsLCBkbyBub3QgDQpkdXBsaWNhdGUgb3IgcmVkaXN0cmli dXRlIGl0IGJ5IGFu
eSBtZWFucy4gUGxlYXNlIGRlbGV0ZSBpdCBhbmQgYW55IGF0dGFjaG1lbnRz IA0KYW5kIG5vdGlm
eSB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgaXQgaW4gZXJy b3IuIFVubGVzcyBz
cGVjaWZpY2FsbHkgDQppbmRpY2F0ZWQsIHRoaXMgZS1tYWlsIGlzIG5vdCBh biBvZmZlciB0byBi
dXkgb3Igc2VsbCBvciBhIHNvbGljaXRhdGlvbiB0byBidXkgDQpvciBzZWxs IGFueSBzZWN1cml0
aWVzLCBpbnZlc3RtZW50IHByb2R1Y3RzIG9yIG90aGVyIGZpbmFuY2lhbCBw cm9kdWN0IG9yIA0K
c2VydmljZSwgYW4gb2ZmaWNpYWwgY29uZmlybWF0aW9uIG9mIGFueSB0cmFu c2FjdGlvbiwgb3Ig
YW4gb2ZmaWNpYWwgc3RhdGVtZW50IA0Kb2YgQmFyY2xheXMuIEFueSB2aWV3 cyBvciBvcGluaW9u
cyBwcmVzZW50ZWQgYXJlIHNvbGVseSB0aG9zZSBvZiB0aGUgYXV0aG9yIGFu ZCANCmRvIG5vdCBu
ZWNlc3NhcmlseSByZXByZXNlbnQgdGhvc2Ugb2YgQmFyY2xheXMuIFRoaXMg ZS1tYWlsIGlzIHN1
YmplY3QgdG8gdGVybXMgDQphdmFpbGFibGUgYXQgdGhlIGZvbGxvd2luZyBs aW5rOiA8L0ZPTlQ+
PC9TUEFOPjxTUEFOIGxhbmc9RU4tR0IgDQpzdHlsZT0iRk9OVC1TSVpFOiAx MHB0OyBDT0xPUjog
bmF2eTsgRk9OVC1GQU1JTFk6IEFyaWFsOyBtc28tYW5zaS1sYW5ndWFnZTog RU4tR0I7IG1zby1m
YXJlYXN0LWxhbmd1YWdlOiBFTi1HQiI+PEEgDQpocmVmPSJodHRwOi8vd3d3 LmJhcmNhcC5jb20v
ZW1haWxkaXNjbGFpbWVyIj53d3cuYmFyY2FwLmNvbS9lbWFpbGRpc2NsYWlt ZXI8L0E+LiANCjwv
U1BBTj48U1BBTiBzdHlsZT0iRk9OVC1TSVpFOiAxMXB0Ij48Rk9OVCBmYWNl PSJUaW1lcyBOZXcg
Um9tYW4iPkJ5IG1lc3NhZ2luZyANCndpdGggQmFyY2xheXMgeW91IGNvbnNl bnQgdG8gdGhlIGZv
cmVnb2luZy48U1BBTiANCnN0eWxlPSJtc28tc3BhY2VydW46IHllcyI+Jm5i c3A7IDwvU1BBTj5C
YXJjbGF5cyBDYXBpdGFsIGlzIHRoZSBpbnZlc3RtZW50IA0KYmFua2luZyBk aXZpc2lvbiBvZiBC
YXJjbGF5cyBCYW5rIFBMQywgYSBjb21wYW55IHJlZ2lzdGVyZWQgaW4gPD94 bWw6bmFtZXNwYWNl
IA0KcHJlZml4ID0gc3QxIG5zID0gInVybjpzY2hlbWFzLW1pY3Jvc29mdC1j b206b2ZmaWNlOnNt
YXJ0dGFncyIgLz48c3QxOnBsYWNlIA0KdzpzdD0ib24iPjxzdDE6Y291bnRy eS1yZWdpb24gdzpz
dD0ib24iPkVuZ2xhbmQ8L3N0MTpjb3VudHJ5LXJlZ2lvbj48L3N0MTpwbGFj ZT4gDQoobnVtYmVy
IDEwMjYxNjcpIHdpdGggaXRzIHJlZ2lzdGVyZWQgb2ZmaWNlIGF0IDxzdDE6 YWRkcmVzcyANCnc6
c3Q9Im9uIj48c3QxOlN0cmVldCB3OnN0PSJvbiI+MSBDaHVyY2hpbGwgUGxh Y2U8L3N0MTpTdHJl
ZXQ+LCA8c3QxOkNpdHkgDQp3OnN0PSJvbiI+TG9uZG9uPC9zdDE6Q2l0eT4s IDxzdDE6UG9zdGFs
Q29kZSB3OnN0PSJvbiI+RTE0IA0KNUhQPC9zdDE6UG9zdGFsQ29kZT48L3N0 MTphZGRyZXNzPi48
U1BBTiBzdHlsZT0ibXNvLXNwYWNlcnVuOiB5ZXMiPiZuYnNwOyANCjwvU1BB Tj5UaGlzIGVtYWls
IG1heSByZWxhdGUgdG8gb3IgYmUgc2VudCBmcm9tIG90aGVyIG1lbWJlcnMg b2YgdGhlIEJhcmNs
YXlzIA0KR3JvdXAuPEkgc3R5bGU9Im1zby1iaWRpLWZvbnQtc3R5bGU6IG5v cm1hbCI+PG86cD48
L286cD48L0k+PC9GT05UPjwvU1BBTj48L1A+DQo8UCBjbGFzcz1Nc29Ob3Jt YWwgDQpzdHlsZT0i
TUFSR0lOOiAwaW4gMGluIDBwdDsgbXNvLWxheW91dC1ncmlkLWFsaWduOiBu b25lIj48U1BBTiAN
CnN0eWxlPSJGT05ULVNJWkU6IDExcHQiPjxGT05UIA0KZmFjZT0iVGltZXMg TmV3IFJvbWFuIj5f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f XzwvRk9OVD48L1NQ
QU4+PC9GT05UPjwvUD4NCjwvYm9keT4NCg0KPC9odG1sPg0K

--_000_A171E013BA199C4ABD13540D0D634E370103925092LDNPCMMGMB0 1I_--

Re: firefox 3.6.9 fails to connect due to SSL DHE

am 24.09.2010 18:55:40 von Ricardo Stella

--------------050104050705080803080701
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


How?

I have this for SSLCipherSuite:

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL



On 9/24/2010 5:35 AM, Jackie.Wong@barclayscapital.com wrote:
>
> Have you tried switching off EDH using the SSLCipherSuite directive in
> the apache config?
>
>
>
> *From:* Ricardo Stella [mailto:stella@rider.edu]
> *Sent:* Friday, September 24, 2010 3:04 AM
> *To:* users@httpd.apache.org
> *Subject:* [users@httpd] firefox 3.6.9 fails to connect due to SSL DHE
>
>
>
>
> Hello,
>
> The latest Firefox 3.6.9+ will fail to connect to a server using the
> SSL DHE key exchange. I guess my server is using this (I do have a
> commercial certificate). Basically Mozilla says it's a server
> misconfiguration issue. Anyone knows what needs to be configured so
> this doesn't happen?
>
> TIA.
>
> _______________________________________________
>
>
>
> This e-mail may contain information that is confidential, privileged
> or otherwise protected from disclosure. If you are not an intended
> recipient of this e-mail, do not duplicate or redistribute it by any
> means. Please delete it and any attachments and notify the sender that
> you have received it in error. Unless specifically indicated, this
> e-mail is not an offer to buy or sell or a solicitation to buy or sell
> any securities, investment products or other financial product or
> service, an official confirmation of any transaction, or an official
> statement of Barclays. Any views or opinions presented are solely
> those of the author and do not necessarily represent those of
> Barclays. This e-mail is subject to terms available at the following
> link: www.barcap.com/emaildisclaimer
> . By messaging with Barclays
> you consent to the foregoing. Barclays Capital is the investment
> banking division of Barclays Bank PLC, a company registered in England
> (number 1026167) with its registered office at 1 Churchill Place,
> London, E14 5HP. This email may relate to or be sent from other
> members of the Barclays Group.//
>
> _______________________________________________
>

--------------050104050705080803080701
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit









How? 



I have this for SSLCipherSuite:



SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL







On 9/24/2010 5:35 AM, wrote:
cite="mid:A171E013BA199C4ABD13540D0D634E370103925092@LDNPCMM GMB01.INTRANET.BARCAPINT.COM"
type="cite">




Have
you tried switching off EDH using the SSLCipherSuite
directive in the apache
config?


 




From: style="font-size: 10pt; font-family:
"Tahoma","sans-serif";"> Ricardo
Stella
[]

Sent: Friday, September 24, 2010 3:04 AM

To:

Subject: [users@httpd] firefox 3.6.9 fails to
connect due to SSL DHE




 




style="color: black;">

Hello,



The latest Firefox 3.6.9+ will fail to connect to a
server using the SSL DHE
key exchange.  I guess my server is using this (I do
have a commercial
certificate).  Basically Mozilla says it's a server
misconfiguration
issue.  Anyone knows what needs to be configured so this
doesn't happen?



TIA.









style="font-size: 11pt;"> face="Times New Roman">_______________________________________________


style="font-size: 11pt;"> face="Times New Roman"> 


style="font-size: 11pt;"> face="Times New Roman">This e-mail may contain information
that is confidential, privileged or otherwise protected
from disclosure. If you are not an intended recipient of
this e-mail, do not duplicate or redistribute it by any
means. Please delete it and any attachments and notify the
sender that you have received it in error. Unless
specifically indicated, this e-mail is not an offer to buy
or sell or a solicitation to buy or sell any securities,
investment products or other financial product or service,
an official confirmation of any transaction, or an
official statement of Barclays. Any views or opinions
presented are solely those of the author and do not
necessarily represent those of Barclays. This e-mail is
subject to terms available at the following link:
style="font-size: 10pt; color: navy; font-family: Arial;"
lang="EN-GB"> moz-do-not-send="true"
href="http://www.barcap.com/emaildisclaimer">www.barcap.com/ emaildisclaimer.
face="Arial">By messaging with
Barclays you consent to the foregoing.  Barclays
Capital is the investment banking division of Barclays
Bank PLC, a company registered in w:st="on">England
(number 1026167) with its registered office at w:st="on">1 Churchill Place,
London, w:st="on">E14 5HP. style=""> 
This email may relate to or be sent
from other members of the Barclays Group.


style="font-size: 11pt;"> face="Times New Roman">_______________________________________________






--------------050104050705080803080701--