Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 Jul 2015 18:09:13 +0200
From:      Polytropon <freebsd@edvax.de>
To:        Ian Smith <smithi@nimnet.asn.au>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: FreeBSD Forum access problem (was Re: Endless Data Loss)
Message-ID:  <20150726180913.bfa82863.freebsd@edvax.de>
In-Reply-To: <20150726233449.M17327@sola.nimnet.asn.au>
References:  <mailman.67.1437912001.91662.freebsd-questions@freebsd.org> <20150726233449.M17327@sola.nimnet.asn.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 26 Jul 2015 23:58:25 +1000 (EST), Ian Smith wrote:
> In freebsd-questions Digest, Vol 581, Issue 7, Message: 9
> On Sat, 25 Jul 2015 20:03:43 +0200 Polytropon <freebsd@edvax.de> wrote:
>  > On Sat, 25 Jul 2015 09:23:51 -0700, jungle Boogie wrote:
>  > > On 25 July 2015 at 06:51, Polytropon <freebsd@edvax.de> wrote:
>  > > > I've tried back and forth with Opera (version 11.50/1074 here).
>  > > > From "about:config" with the search terms "tls" and "ssl" and
>  > > > through Tools -> Preferences -> Advanced -> Security... I just
>  > > > keep getting this "helpful" message:
>  > > >
>  > > >         https://forums.freebsd.org/
>  > > >
>  > > >         Error
>  > > >
>  > > >         Could not connect to remote server
>  > > >         Check that the address is spelled correctly,
>  > > >         or try searching for the site.
>  > > 
>  > > 
>  > > Can you access https://www.freebsd.org/ ?
>  > 
>  > Yes, that page never stopped working.
>  > 
>  > > Both have a preferred cipher of TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
>  > 
>  > Interesting... so what's the significant difference here?
> 
> That's not the problem.  The problem with the forums site is that it no 
> longer allows connections using SSLv3 or TLS 1.0 .. it requires at least 
> TLS 1.1 now, and might later accept only TLS 1.2, even just for reading.

Thank you for clarification! I've set the security options
to only (!) allow TLS 1.1 and 1.2, _no_ SSL v3 or TLS 1.0,
and now I can connect to the forum again. I'll check now if
the other few websites I visit will be "impacted" by that
configuration change.

Sometimes, just that kind of "little pointer" can solve an
unpleasant problem. Thanks again!



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150726180913.bfa82863.freebsd>