04-10-2018 10:31 PM - edited 03-08-2019 07:36 PM
04-12-2018 09:40 PM
Hi Matthew,
Issue is resolved,
GUI is accessible after enabling the TLSv1.1 & TLSv1.2 for WEBUI.
Regards,
Neel Mehta
04-11-2018 08:16 PM
04-11-2018 09:36 PM
Hi Matthew,
Yes, I have checked on multiple browsers, and these are SMA devices and i have disabled SSLv3 for all the four services; EUQ, WEBUI, LDAP, UPDATER, i tried to re-enable with only WEBUI service but the issue persist even after enabling for all the services, Yes its giving error for ciphers after enabling for all the services, however i haven't made any changes for ciphers i simply disabled the SSLv3 for all the services.
Regards,
Neel Mehta
04-11-2018 09:46 PM
04-11-2018 10:00 PM
Hi Matthew,
Please find the below error given by web browser, after deleting all the history and cookies.
This site can’t provide a secure connection
XXX.XXX.XXX.XXX uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Regards,
Neel Mehta
04-11-2018 10:07 PM
04-11-2018 10:20 PM
Hi Matthew,
Please find below mentioned SSL Configuration.
<ssl>
<ssl_inbound_method>sslv3tlsv1_0tlsv1_1tlsv1_2</ssl_inbound_method>
<ssl_inbound_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-EXPORT</ssl_inbound_ciphers>
<ssl_outbound_method>sslv3tlsv1_0tlsv1_1tlsv1_2</ssl_outbound_method>
<ssl_outbound_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-EXPORT</ssl_outbound_ciphers>
<ssl_gui_method>sslv3tlsv1_0tlsv1_1tlsv1_2</ssl_gui_method>
<ssl_gui_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-
EXPORT</ssl_gui_ciphers>
</ssl>
<gui_ssl_tls_versions>
<gui_ssl_tls_version>TLSv1.0</gui_ssl_tls_version>
<gui_ssl_tls_version>SSLv3.0</gui_ssl_tls_version>
</gui_ssl_tls_versions>
Note: This is an old configuration file, as i don't know how to check through CLI for current configuration.
Regards,
Neel Mehta
04-11-2018 10:25 PM
04-11-2018 10:40 PM
Hi Matthew
Please find the current configuration below:
<ssl>
<ssl_inbound_method>sslv3tlsv1_0tlsv1_1tlsv1_2</ssl_inbound_method>
<ssl_inbound_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-EXPORT</ssl_inbound_ciphers>
<ssl_outbound_method>sslv3tlsv1_0tlsv1_1tlsv1_2</ssl_outbound_method>
<ssl_outbound_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-EXPORT</ssl_outbound_ciphers>
<ssl_gui_method>tlsv1</ssl_gui_method>
<ssl_gui_ciphers>RC4-SHA:RC4-MD5:ALL:-aNULL:-EXPORT</ssl_gui_ciphers>
</ssl>
<gui_ssl_tls_versions>
<gui_ssl_tls_version>TLSv1.0</gui_ssl_tls_version>
</gui_ssl_tls_versions>
Regards,
Neel Mehta
04-11-2018 10:52 PM
04-12-2018 09:40 PM
Hi Matthew,
Issue is resolved,
GUI is accessible after enabling the TLSv1.1 & TLSv1.2 for WEBUI.
Regards,
Neel Mehta
04-12-2018 09:48 PM
04-12-2018 09:51 PM
Hi Matthew,
Thank You :D, and also thanks for your help too for narrow down the issue...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide