> Date: Tuesday, July 21, 2015 10:05:17 PM -0400 > From: TE Dukes <tdukes at palmettoshopper.com> > To: 'CentOS mailing list' <centos at centos.org> > > >> -----Original Message----- >> From: centos-bounces at centos.org >> [mailto:centos-bounces at centos.org] On Behalf Of Thomas Eriksson >> Sent: Tuesday, July 21, 2015 9:29 PM >> >> On 07/21/2015 06:22 PM, Richard wrote: >> > >> > >> > ------------ Original Message ------------ >> >> Date: Tuesday, July 21, 2015 09:19:05 PM -0400 >> >> From: TE Dukes <tdukes at palmettoshopper.com> >> >> >> >> >> >>> -----Original Message----- >> >>> From: centos-bounces at centos.org >> >>> [mailto:centos-bounces at centos.org] On Behalf Of Scott Robbins >> >>> Sent: Tuesday, July 21, 2015 9:03 PM >> >>> >> >>> On Tue, Jul 21, 2015 at 05:47:39PM -0700, Dave Stevens wrote: >> >>>> On Tue, 21 Jul 2015 20:40:25 -0400 >> >>>> "TE Dukes" <tdukes at palmettoshopper.com> wrote: >> >>>> >> >>>>> Hello, >> >>>>> >> >>>>> Trying to access webmin but I get the error: >> >>>>> ssl_error_weak_server_cert_key. >> >>>>> >> >>>>> I tried uninstalling Firefox and re-installing 38.x but >> still get >> >>>>> the error. >> >>> >> >>> Does this help? >> >>> >> >>> https://www.reddit.com/r/firefox/comments/3coba7/firefox_39_co >> >>> mpletely_breaks_older_sslv3_pages/ >> >>> >> >>> Untested by me >> >>> >> >>> -- >> >>> Scott Robbins >> >> >> >> Those are the ones I changed in about:config. It didn't >> work for me. >> >> >> > >> > I've been having a similar issue (with an internal router). The >> > following from the above link did the trick for me: >> > >> > Found the keys. Go into about:config and search >> > >> > security.ssl3.dhe_rsa_aes >> > >> > It'll return two keys that are set to true. Set them both to >> > false. Things should load now >> > >> > I didn't have to restart the browser. >> > >> > >> Sounds like your problem is described in this bug report >> https://bugzilla.mozilla.org/show_bug.cgi?id=1181515 >> >> Your webmin server probably have an old, less than 1024 bit, >> certificate. You should be able to connect with an older browser >> and update the certificate from the webmin gui. >> >> -Thomas > > That's what I have read, but I have tried to install an older > version but I still get the error. > > Uninstalling must not remove everything. Guess I should try > unistalling webmin?? > My issue was/is ssl_error_weak_server_ephemeral_dh_key, so not the same as yours, but changing those settings worked with the ff 40-b3 release that I'm using. You can find a full archive of ff releases at: <ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/> At least with the recent ones, the linux releases are self-contained and can be uncompressed in private user space and run from there so you can do this without mucking with your centos repository versions. I'm currently using c7/mate, but have been using that archive, without dependency issues, for some time - including when I was running c6.