Unable to connect to https://admin.fedoraproject.org with firefox, error is ssl_error_no_cypher_overlap

[Sergio Pascual]

Hello, since a week or so I have been unable to connect to
https://admin.fedoraproject.org with firefox, I get an error like (I'm
translating from Spanish)
"Secure connection failed, no common cipher algorithms
(ssl_error_no_cypher_overlap)"

I haven't changed any security configuration in firefox, so I assume this
is a change in admin server or in firefox. I can connect with epiphany to
https://admin.fedoraproject.org

https://koji.fedoraproject.org doesn't seem affected ( I can connect with
firefox)

Regards, Sergio
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141013/7f791cb9/attachment.html>

[Reindl Harald]

Post by Sergio Pascual
Hello, since a week or so I have been unable to connect to
https://admin.fedoraproject.org with firefox, I get an error like (I'm
translating from Spanish)
"Secure connection failed, no common cipher algorithms
(ssl_error_no_cypher_overlap)"
I haven't changed any security configuration in firefox, so I assume
this is a change in admin server or in firefox. I can connect with
epiphany to https://admin.fedoraproject.org
https://koji.fedoraproject.org doesn't seem affected ( I can connect
with firefox)

which version of firefox?
works fine here

TLS_DHE_RSA_WITH_AES_128_CBC_SHA
4096 Bit SHA256 certificate

http://stackoverflow.com/questions/547219/firefox-ssl-error-no-cypher-overlap-error



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141013/58f91a49/attachment.sig>

[Kevin Fenzi]

On Mon, 13 Oct 2014 16:49:38 +0200

Post by Sergio Pascual
Hello, since a week or so I have been unable to connect to
https://admin.fedoraproject.org with firefox, I get an error like (I'm
translating from Spanish)
"Secure connection failed, no common cipher algorithms
(ssl_error_no_cypher_overlap)"

What version of firefox is this?

We have been tweaking our ssl settings recently to match up with the
recommended Mozilla ssl server settings:
https://wiki.mozilla.org/Security/Server_Side_TLS

Post by Sergio Pascual
I haven't changed any security configuration in firefox, so I assume
this is a change in admin server or in firefox. I can connect with
epiphany to https://admin.fedoraproject.org
https://koji.fedoraproject.org doesn't seem affected ( I can connect
with firefox)

Can you file a ticket on this in the infrastructure trac and we can try
and see whats happening in your case?

https://fedorahosted.org/fedora-infrastructure/newticket

Thanks,

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141013/3a50b9bf/attachment.sig>

[Jaroslav Skarvada]

Same problem with https://kojipkgs.fedoraproject.org/

I am pretty sure it worked on Friday, Fedora 20 with latest
updates, firefox-32.0.2-1.fc20.x86_64 with default configuration,
nothing changed on my side, opened ticket [1]

thanks & regards

Jaroslav

[1] https://fedorahosted.org/fedora-infrastructure/ticket/4565

[Kevin Fenzi]

On Mon, 13 Oct 2014 12:02:31 -0400 (EDT)

Post by Jaroslav Skarvada
Same problem with https://kojipkgs.fedoraproject.org/
I am pretty sure it worked on Friday, Fedora 20 with latest
updates, firefox-32.0.2-1.fc20.x86_64 with default configuration,
nothing changed on my side, opened ticket [1]
thanks & regards

This was due to some changes we pushed out this morning. ;(

It's been reverted and everything should be back to normal with
kojipkgs now. The issue was only there for a few minutes (would have
been less if squid had restarted as it should have).

Sorry for the trouble

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141013/94fa60a0/attachment.sig>

[Sergio Pascual]

Hi

Post by Kevin Fenzi
On Mon, 13 Oct 2014 16:49:38 +0200

Post by Sergio Pascual
Hello, since a week or so I have been unable to connect to
https://admin.fedoraproject.org with firefox, I get an error like (I'm
translating from Spanish)
"Secure connection failed, no common cipher algorithms
(ssl_error_no_cypher_overlap)"

What version of firefox is this?

This is firefox-32.0.2-1.fc20.x86_64

I have created a new empty firefox profile and it works, so it must
something in my profile configuration.

Post by Kevin Fenzi
We have been tweaking our ssl settings recently to match up with the
https://wiki.mozilla.org/Security/Server_Side_TLS

Post by Sergio Pascual
I haven't changed any security configuration in firefox, so I assume
this is a change in admin server or in firefox. I can connect with
epiphany to https://admin.fedoraproject.org
https://koji.fedoraproject.org doesn't seem affected ( I can connect
with firefox)

Can you file a ticket on this in the infrastructure trac and we can try
and see whats happening in your case?
https://fedorahosted.org/fedora-infrastructure/newticket

I can't login into this one either :(

Well, I will do it with epiphany

https://fedorahosted.org/fedora-infrastructure/ticket/4567

Thank you

Post by Kevin Fenzi
Thanks,
kevin
--
devel mailing list
devel at lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141013/d60fa27e/attachment.html>