[CentOS] Firefox 39

[Richard]

> Date: Tuesday, July 21, 2015 10:05:17 PM -0400
> From: TE Dukes <tdukes at palmettoshopper.com>
> To: 'CentOS mailing list' <centos at centos.org>
>  
> 
>> -----Original Message-----
>> From: centos-bounces at centos.org 
>> [mailto:centos-bounces at centos.org] On Behalf Of Thomas Eriksson
>> Sent: Tuesday, July 21, 2015 9:29 PM
>> 
>> On 07/21/2015 06:22 PM, Richard wrote:
>> > 
>> > 
>> > ------------ Original Message ------------
>> >> Date: Tuesday, July 21, 2015 09:19:05 PM -0400
>> >> From: TE Dukes <tdukes at palmettoshopper.com>
>> >>  
>> >> 
>> >>> -----Original Message-----
>> >>> From: centos-bounces at centos.org
>> >>> [mailto:centos-bounces at centos.org] On Behalf Of Scott Robbins
>> >>> Sent: Tuesday, July 21, 2015 9:03 PM
>> >>> 
>> >>> On Tue, Jul 21, 2015 at 05:47:39PM -0700, Dave Stevens wrote:
>> >>>> On Tue, 21 Jul 2015 20:40:25 -0400
>> >>>> "TE Dukes" <tdukes at palmettoshopper.com> wrote:
>> >>>> 
>> >>>>> Hello,
>> >>>>> 
>> >>>>> Trying to access webmin but I get the error:
>> >>>>> ssl_error_weak_server_cert_key.
>> >>>>> 
>> >>>>> I tried uninstalling Firefox and re-installing 38.x but 
>> still get  
>> >>>>> the error.
>> >>> 
>> >>> Does this help?
>> >>> 
>> >>> https://www.reddit.com/r/firefox/comments/3coba7/firefox_39_co
>> >>> mpletely_breaks_older_sslv3_pages/
>> >>> 
>> >>> Untested by me
>> >>> 
>> >>> --
>> >>> Scott Robbins
>> >> 
>> >> Those are the ones I changed in about:config. It didn't 
>> work for me.
>> >> 
>> > 
>> > I've been having a similar issue (with an internal router). The
>> > following from the above link did the trick for me:
>> > 
>> >    Found the keys. Go into about:config and search
>> > 
>> >    security.ssl3.dhe_rsa_aes
>> > 
>> >    It'll return two keys that are set to true. Set them both to
>> >    false. Things should load now
>> > 
>> > I didn't have to restart the browser.
>> > 
>> > 
>> Sounds like your problem is described in this bug report
>> https://bugzilla.mozilla.org/show_bug.cgi?id=1181515
>> 
>> Your webmin server probably have an old, less than 1024 bit,
>> certificate. You should be able to connect with an older browser
>> and update the certificate from the webmin gui.
>> 
>> -Thomas
> 
> That's what I have read, but I have tried to install an older
> version but I still get the error.
> 
> Uninstalling must not remove everything. Guess I should try
> unistalling webmin??
> 

My issue was/is ssl_error_weak_server_ephemeral_dh_key, so not the
same as yours, but changing those settings worked with the ff 40-b3
release that I'm using.

You can find a full archive of ff releases at:

  <ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/>

At least with the recent ones, the linux releases are self-contained
and can be uncompressed in private user space and run from there so
you can do this without mucking with your centos repository
versions. 

I'm currently using c7/mate, but have been using that archive,
without dependency issues, for some time - including when I was
running c6.