> -----Original Message----- > From: centos-bounces at centos.org > [mailto:centos-bounces at centos.org] On Behalf Of Thomas Eriksson > Sent: Tuesday, July 21, 2015 9:29 PM > To: centos at centos.org > Subject: Re: [CentOS] Firefox 39 > > On 07/21/2015 06:22 PM, Richard wrote: > > > > > > ------------ Original Message ------------ > >> Date: Tuesday, July 21, 2015 09:19:05 PM -0400 > >> From: TE Dukes <tdukes at palmettoshopper.com> > >> > >> > >>> -----Original Message----- > >>> From: centos-bounces at centos.org > >>> [mailto:centos-bounces at centos.org] On Behalf Of Scott Robbins > >>> Sent: Tuesday, July 21, 2015 9:03 PM > >>> > >>> On Tue, Jul 21, 2015 at 05:47:39PM -0700, Dave Stevens wrote: > >>>> On Tue, 21 Jul 2015 20:40:25 -0400 > >>>> "TE Dukes" <tdukes at palmettoshopper.com> wrote: > >>>> > >>>>> Hello, > >>>>> > >>>>> Trying to access webmin but I get the error: > >>>>> ssl_error_weak_server_cert_key. > >>>>> > >>>>> I tried uninstalling Firefox and re-installing 38.x but > still get > >>>>> the error. > >>> > >>> Does this help? > >>> > >>> https://www.reddit.com/r/firefox/comments/3coba7/firefox_39_co > >>> mpletely_breaks_older_sslv3_pages/ > >>> > >>> Untested by me > >>> > >>> -- > >>> Scott Robbins > >> > >> Those are the ones I changed in about:config. It didn't > work for me. > >> > > > > I've been having a similar issue (with an internal router). The > > following from the above link did the trick for me: > > > > Found the keys. Go into about:config and search > > > > security.ssl3.dhe_rsa_aes > > > > It'll return two keys that are set to true. Set them both to > > false. Things should load now > > > > I didn't have to restart the browser. > > > > > Sounds like your problem is described in this bug report > https://bugzilla.mozilla.org/show_bug.cgi?id=1181515 > > Your webmin server probably have an old, less than 1024 bit, > certificate. You should be able to connect with an older browser > and update the certificate from the webmin gui. > > -ThomasThat's what I have read, but I have tried to install an older version but I still get the error. Uninstalling must not remove everything. Guess I should try unistalling webmin??
> Date: Tuesday, July 21, 2015 10:05:17 PM -0400 > From: TE Dukes <tdukes at palmettoshopper.com> > To: 'CentOS mailing list' <centos at centos.org> > > >> -----Original Message----- >> From: centos-bounces at centos.org >> [mailto:centos-bounces at centos.org] On Behalf Of Thomas Eriksson >> Sent: Tuesday, July 21, 2015 9:29 PM >> >> On 07/21/2015 06:22 PM, Richard wrote: >> > >> > >> > ------------ Original Message ------------ >> >> Date: Tuesday, July 21, 2015 09:19:05 PM -0400 >> >> From: TE Dukes <tdukes at palmettoshopper.com> >> >> >> >> >> >>> -----Original Message----- >> >>> From: centos-bounces at centos.org >> >>> [mailto:centos-bounces at centos.org] On Behalf Of Scott Robbins >> >>> Sent: Tuesday, July 21, 2015 9:03 PM >> >>> >> >>> On Tue, Jul 21, 2015 at 05:47:39PM -0700, Dave Stevens wrote: >> >>>> On Tue, 21 Jul 2015 20:40:25 -0400 >> >>>> "TE Dukes" <tdukes at palmettoshopper.com> wrote: >> >>>> >> >>>>> Hello, >> >>>>> >> >>>>> Trying to access webmin but I get the error: >> >>>>> ssl_error_weak_server_cert_key. >> >>>>> >> >>>>> I tried uninstalling Firefox and re-installing 38.x but >> still get >> >>>>> the error. >> >>> >> >>> Does this help? >> >>> >> >>> https://www.reddit.com/r/firefox/comments/3coba7/firefox_39_co >> >>> mpletely_breaks_older_sslv3_pages/ >> >>> >> >>> Untested by me >> >>> >> >>> -- >> >>> Scott Robbins >> >> >> >> Those are the ones I changed in about:config. It didn't >> work for me. >> >> >> > >> > I've been having a similar issue (with an internal router). The >> > following from the above link did the trick for me: >> > >> > Found the keys. Go into about:config and search >> > >> > security.ssl3.dhe_rsa_aes >> > >> > It'll return two keys that are set to true. Set them both to >> > false. Things should load now >> > >> > I didn't have to restart the browser. >> > >> > >> Sounds like your problem is described in this bug report >> https://bugzilla.mozilla.org/show_bug.cgi?id=1181515 >> >> Your webmin server probably have an old, less than 1024 bit, >> certificate. You should be able to connect with an older browser >> and update the certificate from the webmin gui. >> >> -Thomas > > That's what I have read, but I have tried to install an older > version but I still get the error. > > Uninstalling must not remove everything. Guess I should try > unistalling webmin?? >My issue was/is ssl_error_weak_server_ephemeral_dh_key, so not the same as yours, but changing those settings worked with the ff 40-b3 release that I'm using. You can find a full archive of ff releases at: <ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/> At least with the recent ones, the linux releases are self-contained and can be uncompressed in private user space and run from there so you can do this without mucking with your centos repository versions. I'm currently using c7/mate, but have been using that archive, without dependency issues, for some time - including when I was running c6.
> -----Original Message----- > From: centos-bounces at centos.org > [mailto:centos-bounces at centos.org] On Behalf Of Richard > Sent: Tuesday, July 21, 2015 11:38 PM > To: CentOS mailing list > Subject: Re: [CentOS] Firefox 39 > > > > > Date: Tuesday, July 21, 2015 10:05:17 PM -0400 > > From: TE Dukes <tdukes at palmettoshopper.com> > > To: 'CentOS mailing list' <centos at centos.org> > > > > > >> -----Original Message----- > >> From: centos-bounces at centos.org > >> [mailto:centos-bounces at centos.org] On Behalf Of Thomas Eriksson > >> Sent: Tuesday, July 21, 2015 9:29 PM > >> > >> On 07/21/2015 06:22 PM, Richard wrote: > >> > > >> > > >> > ------------ Original Message ------------ > >> >> Date: Tuesday, July 21, 2015 09:19:05 PM -0400 > >> >> From: TE Dukes <tdukes at palmettoshopper.com> > >> >> > >> >> > >> >>> -----Original Message----- > >> >>> From: centos-bounces at centos.org > >> >>> [mailto:centos-bounces at centos.org] On Behalf Of Scott Robbins > >> >>> Sent: Tuesday, July 21, 2015 9:03 PM > >> >>> > >> >>> On Tue, Jul 21, 2015 at 05:47:39PM -0700, Dave Stevens wrote: > >> >>>> On Tue, 21 Jul 2015 20:40:25 -0400 "TE Dukes" > >> >>>> <tdukes at palmettoshopper.com> wrote: > >> >>>> > >> >>>>> Hello, > >> >>>>> > >> >>>>> Trying to access webmin but I get the error: > >> >>>>> ssl_error_weak_server_cert_key. > >> >>>>> > >> >>>>> I tried uninstalling Firefox and re-installing 38.x but > >> still get > >> >>>>> the error. > >> >>> > >> >>> Does this help? > >> >>> > >> >>> https://www.reddit.com/r/firefox/comments/3coba7/firefox_39_co > >> >>> mpletely_breaks_older_sslv3_pages/ > >> >>> > >> >>> Untested by me > >> >>> > >> >>> -- > >> >>> Scott Robbins > >> >> > >> >> Those are the ones I changed in about:config. It didn't > >> work for me. > >> >> > >> > > >> > I've been having a similar issue (with an internal router). The > >> > following from the above link did the trick for me: > >> > > >> > Found the keys. Go into about:config and search > >> > > >> > security.ssl3.dhe_rsa_aes > >> > > >> > It'll return two keys that are set to true. Set them both to > >> > false. Things should load now > >> > > >> > I didn't have to restart the browser. > >> > > >> > > >> Sounds like your problem is described in this bug report > >> https://bugzilla.mozilla.org/show_bug.cgi?id=1181515 > >> > >> Your webmin server probably have an old, less than 1024 bit, > >> certificate. You should be able to connect with an older > browser and > >> update the certificate from the webmin gui. > >> > >> -Thomas > > > > That's what I have read, but I have tried to install an > older version > > but I still get the error. > > > > Uninstalling must not remove everything. Guess I should try > > unistalling webmin?? > > > > My issue was/is ssl_error_weak_server_ephemeral_dh_key, so > not the same as yours, but changing those settings worked > with the ff 40-b3 release that I'm using. > > You can find a full archive of ff releases at: > > <ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/> > > At least with the recent ones, the linux releases are > self-contained and can be uncompressed in private user space > and run from there so you can do this without mucking with > your centos repository versions. > > I'm currently using c7/mate, but have been using that > archive, without dependency issues, for some time - including > when I was running c6. >Hello, I ws able to install Chrome on a Windows machine and fixed the problem. Thanks!!