I'm trying to access a website that is obviously really old and using an old certificate, and I'm getting the error SSL_ERROR_NO_CYPHER_OVERLAP. I have no ability to change the server or get them to upgrade anything, I just want to download a document from their website. Is there any way I can work around this and just get the browser to download it anyway?
Failing that, does anyone have a suggestion as to an old browser I might be able to download on Windows 10 that does support TLS1 or whatever?
Is it possible to bypass SSL_ERROR_NO_CYPHER_OVERLAP?
Forum rules
This General Discussion board is meant for topics that are still relevant to Pale Moon, web browsers, browser tech, UXP applications, and related, but don't have a more fitting board available.
Please stick to the relevance of this forum here, which focuses on everything around the Pale Moon project and its user community. "Random" subjects don't belong here, and should be posted in the Off-Topic board.
This General Discussion board is meant for topics that are still relevant to Pale Moon, web browsers, browser tech, UXP applications, and related, but don't have a more fitting board available.
Please stick to the relevance of this forum here, which focuses on everything around the Pale Moon project and its user community. "Random" subjects don't belong here, and should be posted in the Off-Topic board.
-
jez9999
- Fanatic
- Posts: 109
- Joined: 2015-05-30, 19:35
- Location: UK
-
Moonchild
- Pale Moon guru
- Posts: 37762
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: Is it possible to bypass SSL_ERROR_NO_CYPHER_OVERLAP?
"No cypher overlap" basically means that the encryption cipher suite on the server and the one in the browser cannot agree on a cipher they both support.
If the server is very old, it is likely they are using old stream ciphers (like RC4 or 3DES-112) or specific RSA ones, that are disabled in Pale Moon by default.
In Pale Moon Commander, you can find these ciphers under security -> Ciphers 2 -> Deprecated/weak/broken ciphers
If you don't have that extension installed, look in about:config for security.ssl3.* preferences (3DES is there listed as "des_ede3" as a more verbose descriptor)
If the protocol is an issue, you can lower it to SSL3 by setting security.tls.version.min to 0 (by default we still support TLS 1.0)
If the server is very old, it is likely they are using old stream ciphers (like RC4 or 3DES-112) or specific RSA ones, that are disabled in Pale Moon by default.
In Pale Moon Commander, you can find these ciphers under security -> Ciphers 2 -> Deprecated/weak/broken ciphers
If you don't have that extension installed, look in about:config for security.ssl3.* preferences (3DES is there listed as "des_ede3" as a more verbose descriptor)
If the protocol is an issue, you can lower it to SSL3 by setting security.tls.version.min to 0 (by default we still support TLS 1.0)
"A dead end street is a place to turn around and go into a new direction" - Anonymous
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
-
jez9999
- Fanatic
- Posts: 109
- Joined: 2015-05-30, 19:35
- Location: UK
Re: Is it possible to bypass SSL_ERROR_NO_CYPHER_OVERLAP?
None of that seems to fix the error. Is there a way I can find out precisely what the problem is?
-
Moonchild
- Pale Moon guru
- Posts: 37762
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: Is it possible to bypass SSL_ERROR_NO_CYPHER_OVERLAP?
What is the server? or is it not publicly accessible?
"A dead end street is a place to turn around and go into a new direction" - Anonymous
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
-
jez9999
- Fanatic
- Posts: 109
- Joined: 2015-05-30, 19:35
- Location: UK
Re: Is it possible to bypass SSL_ERROR_NO_CYPHER_OVERLAP?
OK never mind. I just fixed it by changing https to http and it served it without encryption.