[gentoo-user] What do you use for appliances with old SSL?

[gentoo-user] What do you use for appliances with old SSL?

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 188 bytes --]

It seems like modern browsers don't have the option to support old crypto,
eg on firefox setting security.version.tls.min to 0 still blocks SSLv3.
What do you use to access old equipment?

[-- Attachment #2: Type: text/html, Size: 217 bytes --]

Re: [gentoo-user] What do you use for appliances with old SSL?

[J. Roeleveld]

On 25 November 2015 00:33:57 CET, Adam Carter <adamcarter3@gmail.com> wrote:
>It seems like modern browsers don't have the option to support old
>crypto,
>eg on firefox setting security.version.tls.min to 0 still blocks SSLv3.
>What do you use to access old equipment?

A virtual machine with an old browser which is only used to access these devices.

--
Joost
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Re: [gentoo-user] What do you use for appliances with old SSL?

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 673 bytes --]

On Wednesday 25 Nov 2015 07:11:39 J. Roeleveld wrote:
> On 25 November 2015 00:33:57 CET, Adam Carter <adamcarter3@gmail.com> wrote:
> >It seems like modern browsers don't have the option to support old
> >crypto,
> >eg on firefox setting security.version.tls.min to 0 still blocks SSLv3.
> >What do you use to access old equipment?
> 
> A virtual machine with an old browser which is only used to access these
> devices.
> 
> --
> Joost

A less onerous method, but potentially more insecure unless you revert the 
setting for day to day usage, is to type 'about:config' and set 
security.tls.version.min to 0, before you restart FF.

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [gentoo-user] What do you use for appliances with old SSL?

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 483 bytes --]

>
> A less onerous method, but potentially more insecure unless you revert the
> setting for day to day usage, is to type 'about:config' and set
> security.tls.version.min to 0, before you restart FF.
>
>
Restarting doesnt help (with FF 42 at least). Message is "Firefox cannot
guarantee the safety of your data on xxxx because it uses SSLv3, a broken
security protocol.
Advanced info: ssl_error_unsupported_version".

I'm using FF through stunnel at the moment and its good enough.

[-- Attachment #2: Type: text/html, Size: 900 bytes --]