Cannot access WLC 5508 via GUI (https) - ERR_SSL OR CIPHER_MISMATCH

[shivshankarjalanila]

Hi All,

When I am accessing WLC 5508 via GUI (HTTPS), I am getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH. Further, the error  details say "Unsupported protocol - The client and server don't support a common SSL protocol version or cipher suite."

The SSL error is observed only in Chrome and MS Edge only. However, I can access the same link in Firefox.

Can someone please share why such an error and how to fix the error?

Thank You

Shiv

[Mark Elsen]

            - Probably because the 5508 used too old and or weak ciphers, what is it's software version ?

 M.

[LudwigH]

Hello, in my case the issue is in Mobility Express version 8.4 on Aironet 1832i

Regards

[shivshankarjalanila]

Hi Marce1000,

Cisco WLC 5508 uses soft version 8.0.121.0. Thank you.

[frans.smit1]

Did you find a solution to this issue?

[LudwigH]

No, in my case I think I will have to update the Aironet from version 8.4 to version 8.10.151, I really don't know if I have to follow any update path or if I can update directly to the new version

[shivshankarjalanila]

No, not yet. I believe WLC 5508 needs a software upgrade and it should resolve the issue. Any thoughts?

[Mark Elsen]

 -  Indeed , consider upgrading to : https://software.cisco.com/download/home/282600534/type/280926587/release/8.5.171.0

 M.

[shivshankarjalanila]

Ok, thank you for your input. Let me upgrade and see if that resolves.

[nmyamani]

Hi shiv,

Did update solve your issue?

[vansiyasm]

The ERR_SSL_OR_CIPHER_MISMATCH error usually appears in Chrome or Edge when there's no common SSL protocol version or cipher suite between your browser and web server. This means the secure connection can't be established during the TLS handshake process. In most cases, it happens due to factors such as an outdated browser or operating system, a corrupted SSL cache, or changes in the server's SSL/TLS configuration. Try clearing your browser's SSL state and updating the browser to the latest version. or checking if your system time and date are correct. If you're still facing the error even after updating, I'd suggest checking the SSL configuration and clearing your cache. I had a similar issue earlier, and doing both helped resolve it completely.