topic An up-to-date PI 2.2.2 does in Wireless

PI 2.1 and Firefox 39

kurdtkuei — Mon, 05 Jul 2021 10:31:52 GMT

Hi, it seems that PI 2.1 is using unsafe SSL encryption with DHE, which is blocked by the new version of Firefox 39.

The error is

An error occurred during a connection to prime.xxx.com. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)

Except from changing Firefox settings what are the other solutions to that issue? Changing the certificate doesn't help.

Thank you,

Robert

I also am seeing this issue

Robert Burlingame — Fri, 10 Jul 2015 13:23:29 GMT

I also am seeing this issue with UCCX 9.0.2SU2.

Thanks,

Robert B.

This issue is fixed in Prime

Freerk Terpstra — Fri, 10 Jul 2015 20:47:44 GMT

This issue is fixed in Prime Infrastructure 2.2.1. Since that release SSLv3 is disabled, so you can only use TLS with also strong ciphers.

Please rate useful posts 🙂

Hello Robert, I found a

Gilmar Silva — Fri, 10 Jul 2015 22:11:54 GMT

Hello Robert,

I only found a workaround in the link below (no definitive solution yet):

https://support.mozilla.org/pt-BR/questions/1066238

Workaround for Firefox 39 and above:

1) In FireFox, enter "about:config" in the URL field and press enter.

2) Accept the "This might void your warranty!" warning 🙂

3) In the search field at the top, enter "security.ssl3.dhe_rsa_aes"

4) Double click each result (128 and 256) to toggle the Value to "false"

Now retry your site - it should work now. Remember to change these settings back when you're done.

Thanks to "higherdestiny" that posted the answer.

Regards,

Gilmar Silva

Thanks Gilmar. Works like a

Andre Scheepers — Mon, 20 Jul 2015 11:49:08 GMT

Thanks Gilmar. Works like a charm.

This is a good workaround.

Robert Burlingame — Mon, 20 Jul 2015 12:23:55 GMT

This is a good workaround. Thank you Gilmar.

I'm also having the issue

Matthieu LIENART — Mon, 03 Aug 2015 05:52:22 GMT

I'm also having the issue with UCCX 10.0

Is there a fix? Because changing back and forth the Firefox options as proposed above is not really a permanent solution.

Hello Matthieu,I found two

Gilmar Silva — Fri, 11 Sep 2015 11:28:35 GMT

Hello Matthieu,

I found two bugs (CSCuu79565 and CSCuu82538), but there is no fixed release yet (only the same workaround).

Regards,

Gilmar Silva

An up-to-date PI 2.2.2 does

Marvin Rhoads — Sat, 12 Sep 2015 02:15:34 GMT

An up-to-date PI 2.2.2 does not have the problem.

Likewise with 3.0.

I'm a little confused that

Nickolus Looper — Mon, 11 Apr 2016 16:21:21 GMT

I'm a little confused that there is no fix for PI 2.1, as 2.1 is still current - there has been no EoL announcement.

Or does product support just apply to the major rev # (2.x)?

Thanks

Nick

Depending on the mechanics of

Marvin Rhoads — Mon, 11 Apr 2016 16:28:59 GMT

Depending on the mechanics of a given fix, it may or may not be applied to all active releases of a given product.

If you have 2.1 and support, you are entitled to upgrade to 2.2 or even 3.0.

If you really don't want to and cannot upgrade for some other reason, you can open a TAC case and see if a patch can be made available for your use case.

Does anyone know a specific

Nickolus Looper — Mon, 11 Apr 2016 16:34:13 GMT

Does anyone know a specific bug id for this issue?

Of the two mentioned earlier in this thread, one if for Cisco Social Miner (CSCuu82529), and the other is for UCCX (CSCuu82538).

Thanks