Secure Connection Failed (Solved)

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.
Please direct questions that are Mac or Linux-specific (dealing with installation and OS integration) to the appropriate Linux or Mac board.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only. The main focus here is on Pale Moon on Windows. Please direct your questions that are specific for Linux and Mac to the dedicated boards for those operating systems.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
Locked
Ageless

Secure Connection Failed (Solved)

Post by Ageless » 2015-08-08, 23:15

When trying to log in on my account page at The Elder Scrolls Online I am these days met by the following outburst:
Secure Connection Failed

An error occurred during a connection to account.elderscrollsonline.com. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

- The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
I have notified the ESO developers and they say:
We have had some customers run into trouble with login and processing on our website when attempted from a Windows 10 browser. The website was configured with optimization for the browsers available at the time, so any new OS or beta browsers can have have issues with logging into our account.

Please try switching to another browser and continuing with the same steps again.
Problem is, I don't use Windows 10 (will stay far away from it, I'd like total control over my machine). I wouldn't say PM is a beta browser either.
Yet testing with Firefox 38 and 39, the page works fine. So then it would seem to be a PM problem.

It gives the same error if I try to change its URL to HTTP, from HTTPS. And it used to work in the past.
Toggling general.useragent.compatMode.firefox to true doesn't work either.

So, really something that ESO's developers broke and should fix? Or are there things I can try?
Last edited by Ageless on 2015-08-12, 20:43, edited 1 time in total.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29243
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: Secure Connection Failed

Post by Moonchild » 2015-08-08, 23:34

I hate to have to correct them but it is their server that needs to be updated. They are offering a single encryption cipher only, and it's one that has been disabled in Pale Moon (and will be disabled in mainstream browsers as well sooner rather than later).

See: https://www.ssllabs.com/ssltest/analyze.html?d=account.elderscrollsonline.com
Under "configuration" there's only a single cipher listed and it's RC4.
See the FAQ on this forum, top entry, for a workaround - but it's a temporary measure at best. ESO needs to properly configure their secure server.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

User avatar
LimboSlam
Board Warrior
Board Warrior
Posts: 1029
Joined: 2014-06-09, 04:43
Location: USA

Re: Secure Connection Failed

Post by LimboSlam » 2015-08-08, 23:42

This is caused by disabling the RC4 encryption ciphers for secure connections in Pale Moon v25.3 and up. Please read this : https://forum.palemoon.org/viewtopic.php?f=24&t=6262
With Pale Moon by my side, surfing the web is quite enjoyable and takes my headaches away! :)
God is not punishing you, He is preparing you. Trust His plan, not your pain.#‎TrentShelton #‎RehabTime

Ageless

Re: Secure Connection Failed

Post by Ageless » 2015-08-08, 23:44

Thank you Moonchild, forwarded that to their developers. Also put the recommendation from https://en.wikipedia.org/wiki/RC4 in it.
I will not try to work around this then using PM, and instead if I need to use Firefox.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29243
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: Secure Connection Failed

Post by Moonchild » 2015-08-09, 07:24

You may also want to point them to the standards track RFC7465 at https://tools.ietf.org/html/rfc7465 - it's not just a "recommendation", it's actually strongly urged to phase RC4 out ASAP, and servers and clients, for RFC compliance, MUST NOT negotiate RC4 anymore.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Locked