Chrome45 and Firefox - ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION on most sites

I started getting this error when I visit most sites - Microsoft Sites, incl. Knowledge Base MSDN, Lynda.com, etc.

The SSL server may be out of date. ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION Unable to securely connect to the server. This site may have worked previously, but there is a problem with the server. Connecting to such sites weaken security for all users and thus have been disabled.

Is there a way to override this. I use Chrome 45.0.2454.85 m and Firefox v.40.0.3 Works well in legendary IE ... sigh

+5
source share
2 answers

Clear to understand step by step

POODLE ATTACK:

The POODLE attack is an exploit that takes advantage of the use of encryption by some browsers. POODLE (Padding Oracle On Downgraded Legacy Encryption) is the name of a vulnerability that allows exploit exploitation.

SSL 3 is dead, killed by the POODLE attack:

https://community.qualys.com/blogs/securitylabs/2014/10/15/ssl-3-is-dead-killed-by-the-poodle-attack

https://www.us-cert.gov/ncas/alerts/TA14-290A

How to check SSL POODLE / SSLv3 error on WebLogic? How to fix

SSL and Weblogic - Remote PSAdmin

http://weblogic-wonders.com/weblogic/2014/10/16/check-ssl-poodle-sslv3-bug-weblogic-fix/

http://remotepsadmins.com/2015/01/24/ssl-weblogic/

** Chrome is installed to disable and remove SSLv3 in future releases

http://www.zdnet.com/article/chrome-set-to-disable-and-remove-sslv3-in-upcoming-releases/

How to fix the problem:

Renew certificate

Work around:

POODLE Disable SSLv3 Support in Browsers

https://zmap.io/sslv3/browsers.html

For Google Chrome: 1) Create new shortcut for your Chrome on your desktop (2) Right click and select properties (3) Look for Shortcut tab and add the following start-up parameter (Target field): --cipher-suite-blacklist=0x0039,0x0033 Example: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0039,0x0033 4) Click Apply and open your browser from Shortcut You can also run above line from command window to open Google Chrome. For Firefox: (1) In a new tab, type or paste about:config in the address bar and press Enter. (2) In the search box above the list, type or paste dhe and pause while the list is filtered (3) Double-click the security.ssl3.dhe_rsa_aes_128_sha preference to switch it from true to false (4) Double-click the security.ssl3.dhe_rsa_aes_256_sha preference to switch it from true to false (5) Restart your browser 
+3
source

The fact that this happens only for you and for different shared sites indicates that your traffic is modified by a proxy server or antivirus program that is incorrectly configured regardless of which site it intercepts. You should probably find out what it is and update it / find an alternative.

0
source

All Articles