SM Appliances: no common encryption algorithm(s)

My Add-ons · Unread post by **FranklinDM** » 2017-02-28, 12:24

When I try to access SM Appliances' website, I get the problem loading page saying:

Operating system: Windows 7 32-bit
Browser version: Pale Moon 27.2.0a1 (latest unstable)
Problem URL: https://www.smappliance.com/
Installed add-ons: (listed below)

Since this is my first time asking for support, I included all the additional information.
I hope someone could help me with this prob. Thanks in advance.

EDIT: My suspicion is that they're using some kind of an obsolete encryption algorithm, but I'm not sure with that.

Additional information

kizo07 · Unread post by **kizo07** » 2017-02-28, 12:42

FranklinDM wrote:The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

ron_1 · Unread post by **ron_1** » 2017-02-28, 18:01

At the test link below, there's a lot of "handshake failures." I'm not a techie type, but I'd bet that's the cause of the problem.

https://www.ssllabs.com/ssltest/analyze.html?d=www.smappliance.com

My Add-ons · Unread post by **FranklinDM** » 2017-02-28, 23:16

I tried contacting them but just got the usual canned response:

I'm sorry but we currently don't support your browser. Please use another browser such as Chrome, Firefox, or Edge.

I tried it in Firefox but also got the same problem.

ron_1 · Unread post by **ron_1** » 2017-02-28, 23:47

From SSL test link above:

Code: Select all

Handshake Simulation . . . .

Firefox 31.3.0 ESR / Win 7 Server sent fatal alert: handshake_failure
Firefox 47 / Win 7  R		Server sent fatal alert: handshake_failure
Firefox 49 / XP SP3 	    Server sent fatal alert: handshake_failure
Firefox 49 / Win 7  R		Server sent fatal alert: handshake_failure

I'd send them another message. Maybe this time they'll listen since it doesn't work on FF either. Give 'em the link.

My Add-ons · Unread post by **FranklinDM** » 2017-03-01, 00:24

I sent them the message.

. I hope they'd fix it this time.

Unread post by **Moonchild** » 2017-03-01, 22:11

it's a case of no cipher overlap because :

TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) 128
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) 128
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) 256
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) 256

Straight up RSA key exchange is deprecated (No forward secrecy), and as such isn't supported by default in NSS combined with AEAD suites or with SHA256.
I think whomever set this up heard about the SHA1 collision, panicked, and disabled everything with a SHA HMAC (even though SHA1 isn't broken, and even less so for HMAC because it's not sensitive as such to collision issues)

Pale Moon forum

SM Appliances: no common encryption algorithm(s)

SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)

Re: SM Appliances: no common encryption algorithm(s)