New issue
Advanced search Search tips
Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Sep 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 3
Type: Bug



Sign in to add a comment
link

Issue 650356: ERR_SSL_OBSOLETE_CIPHER error

Reported by d.bu...@motivationexcellence.com, Sep 26 2016

Issue description

Chrome Version       : 53.0.2785.116
OS Version: 10.0
URLs (if applicable) : https://seal.networksolutions.com/siteseal/javascript/siteseal.js
Other browsers tested:

What steps will reproduce the problem?
1. Go to https://seal.networksolutions.com/siteseal/javascript/siteseal.js

What is the expected result?
Javascript file should be shown as plain text

What happens instead of that?
Error message "ERR_SSL_OBSOLETE_CIPHER "

Please provide any additional information below. Attach a screenshot if
possible.

UserAgentString: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
 
net-internals-log.json
2.3 MB View Download

Comment 1 by eroman@chromium.org, Sep 26 2016

Components: Internals>Network>SSL

Comment 2 by rsleevi@chromium.org, Sep 26 2016

Status: WontFix (was: Unconfirmed)
WontFix/WorkingAsIntended

That site has a resounding F grade from SSLLabs ( https://www.ssllabs.com/ssltest/analyze.html?viaform=on&d=seal.networksolutions.com ), which is both unfortunate and ironic.

The only crypto enabled on that server is insecure/known weak crypto.

Comment 3 by davidben@chromium.org, Sep 26 2016

I'll see about sending them an email.

Comment 4 by davidben@chromium.org, Sep 26 2016

Sent them mail.

Comment 5 by andy.f...@arfore.com, Sep 30 2016

The site mentioned has had it's SSLCipherSuite values updated so that the obsolete cipher set is no longer used.

Sign in to add a comment