Firefox Error code: SSL_ERROR_UNSAFE_NEGOTIATION

[dumboi2]

Hi admins,

I keep encountering the error above on latest Firefox when trying to sign in (https://secureforums.hardwarezone.com.sg/logon.php). No issues with Chromium.

Anyone else affected?

 

[davidktw]

Hi admins,

I keep encountering the error above on latest Firefox when trying to sign in (https://secureforums.hardwarezone.com.sg/logon.php). No issues with Chromium.

Anyone else affected?

https://www.reddit.com/r/firefox/comments/53bfkr/how_to_solve_ssl_error_unsafe_negotiation/

 

[dumboi2]

Thanks davidktw. Seems I found the issue.

The rest of the forum (on the domain "forums.hardwarezone.com.sg") supports TLS 1.2/1.3 with strong ciphers.
SSL report: Rating A.
https://www.ssllabs.com/ssltest/analyze.html?d=forums.hardwarezone.com.sg&hideResults=on

However, the login page (on the domain "secureforums.hardwarezone.com.sg") only supports TLS 1.2 with weak ciphers. Also vulnerable to POODLE attack.
SSL report: Rating F.
https://www.ssllabs.com/ssltest/analyze.html?d=secureforums.hardwarezone.com.sg&hideResults=on

Possible to fix?

 

[davidktw]

Thanks davidktw. Seems I found the issue.

The rest of the forum (on the domain "forums.hardwarezone.com.sg") supports TLS 1.2/1.3 with strong ciphers.
SSL report: Rating A.
https://www.ssllabs.com/ssltest/analyze.html?d=forums.hardwarezone.com.sg&hideResults=on

However, the login page (on the domain "secureforums.hardwarezone.com.sg") only supports TLS 1.2 with weak ciphers. Also vulnerable to POODLE attack.
SSL report: Rating F.
https://www.ssllabs.com/ssltest/analyze.html?d=secureforums.hardwarezone.com.sg&hideResults=on

Possible to fix?

True fix comes from SPH, and up to them. Your option is accept this potentially vulnerable connection or not. The link I give you had the about:config firefox settings you can set to ignore such weak SSL connection.

 

[rerear]

True fix comes from SPH, and up to them. Your option is accept this potentially vulnerable connection or not. The link I give you had the about:config firefox settings you can set to ignore such weak SSL connection.

is there a way to save the Firefox settings? Seems everytime need to redo the setting.

 

[davidktw]

is there a way to save the Firefox settings? Seems everytime need to redo the setting.

What is "every time" to you ? changes you make to about:config is saved automatically.