[SOLVED] [SBo] slackbuilds.org ssl_error_no_cypher_overlap

elcore · 01-19-2016, 06:04 AM

Icecat browser won't open it:

Code:

Secure Connection Failed

An error occurred during a connection to slackbuilds.org. Cannot 
communicate securely with peer: no common encryption algorithm(s). 
(Error code: ssl_error_no_cypher_overlap)

(works with curl)

55020 · 01-19-2016, 08:01 AM

Hi elcore,

I had the same problem this morning in Firefox. In my case, it was caused by some local workrounds I applied last year for similar problems on other sites. Check your "about:config" and look for 'tls' and/or 'ssl' keys that have been modified, and right-click them to reset them to their default values.

However, your icecat might be different -- upstream may have modified the default values, or it might need to be updated to a newer version. Good luck!

elcore · 01-19-2016, 08:21 AM

It worked few days ago but it was normal http then, now it redirects to https.
I think the problem is with SSL not supported anymore by icecat 38.5.2 (latest version) but that was mozilla decision to drop it in favour of TLS.
Same thing happens when ~/.mozilla renamed so I don't think it's the config.
Edit:
So the problem is with security.ssl3.dhe_rsa_aes_256_sha that is disabled by default in icecat.
If I enable this, then the https page works. But I'll keep the defaults for a while, and use the plain ftp version of sbo.
There are other https pages affected by default ssl/tls setting, like the one reported at icecat list.
I'll mark this [solved] since I did identify the cause, but I wouldn't recommend ssl enabled by default.

CTM · 01-20-2016, 04:01 PM

EDIT: Sorry, never mind: Firefox's SSL/TLS settings are carelessly named, and I thought you'd re-enabled SSLv3 (which should be kept disabled for security reasons).