[opensuse] What does Konqueror have that Firefox doesn't?
I'm trying to access a _really_ old Compaq Remote Insight Board - with Firefox, I get "ssl_error_no_cypher_overlap", but with Konqueror I get through. I need Firefox though as Konqueror doesn't quite cope with some Javascript on the first/login page. I guess Konqueror has support for some elderly cipher protocols, is there any way of finding out which and getting those to work in Firefox too? -- Per Jessen, Zürich (14.3°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2014-06-04 17:26 (GMT+0200) Per Jessen composed:
I'm trying to access a _really_ old Compaq Remote Insight Board - with Firefox, I get "ssl_error_no_cypher_overlap", but with Konqueror I get through. I need Firefox though as Konqueror doesn't quite cope with some Javascript on the first/login page. I guess Konqueror has support for some elderly cipher protocols, is there any way of finding out which and getting those to work in Firefox too?
http://preview.tinyurl.com/oneghrp (bugzilla.mozilla.org search) -> https://bugzilla.mozilla.org/show_bug.cgi?id=970254 -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Felix Miata wrote:
On 2014-06-04 17:26 (GMT+0200) Per Jessen composed:
I'm trying to access a _really_ old Compaq Remote Insight Board - with Firefox, I get "ssl_error_no_cypher_overlap", but with Konqueror I get through. I need Firefox though as Konqueror doesn't quite cope with some Javascript on the first/login page. I guess Konqueror has support for some elderly cipher protocols, is there any way of finding out which and getting those to work in Firefox too?
http://preview.tinyurl.com/oneghrp (bugzilla.mozilla.org search) -> https://bugzilla.mozilla.org/show_bug.cgi?id=970254
Thanks Felix, interesting - I guess I could try an old Firefox then. -- Per Jessen, Zürich (14.3°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Felix Miata írta:
On 2014-06-04 17:26 (GMT+0200) Per Jessen composed:
[SNIP]
Do I understand correctly that I can not visit/access a site since firefox decides its encryption is not secure enough? Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2014-06-04 18:20 (GMT+0200) Istvan Gabor composed:
Do I understand correctly that I can not visit/access a site since firefox decides its encryption is not secure enough?
Just because you cannot in the latest FF version doesn't mean you can't. You can have more than one Gecko browser "installed", meaning an older FF provided as a .gz (really old) or .bz2 (more recent) by mozilla.org and extracted somewhere like /usr/local/, /opt/ or $HOME; or if not already using the latest SeaMonkey and are using Evergreen you could install 2.0.14 from mozilla:/legacy. And at this point Konq is working still. Maybe Rekonq still works too. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
El 04/06/14 15:41, Felix Miata escribió:
On 2014-06-04 18:20 (GMT+0200) Istvan Gabor composed:
Do I understand correctly that I can not visit/access a site since firefox decides its encryption is not secure enough?
Just because you cannot in the latest FF version doesn't mean you can't.
Yes, but he will require an older java version as well.. Since Java 7 Update 51 most of this applets won't run, they must be code signed with code signature from a trusted protection racket ^W^W CA. :-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2014-06-04 16:10 (GMT-0400) Cristian Rodríguez composed:
Felix Miata composed:
Just because you cannot in the latest FF version doesn't mean you can't.
Yes, but he will require an older java version as well.. Since Java 7 Update 51 most of this applets won't run, they must be code signed with code signature from a trusted protection racket ^W^W CA. :-)
Those with hardware to run a VM could install a minimal X older openSUSE release with versions that work, not do any updating in it, and use it just as a workaround for the current problem. Without hardware for a VM, multiboot could provide less convenient required functionality. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
El 04/06/14 11:26, Per Jessen escribió:
I'm trying to access a _really_ old Compaq Remote Insight Board - with Firefox, I get "ssl_error_no_cypher_overlap", but with Konqueror I get through. I need Firefox though as Konqueror doesn't quite cope with some Javascript on the first/login page. I guess Konqueror has support for some elderly cipher protocols, is there any way of finding out which and getting those to work in Firefox too?
No, Konqueror has nothing to do with this.. it is the underlying SSL library.. firefox uses NSS while konqueror uses openSSL, the latter in released openSUSE versions still offers obsolete/dangerous ciphersuites in the client hello.. (in factory it no longer does). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Cristian Rodríguez wrote:
El 04/06/14 11:26, Per Jessen escribió:
I'm trying to access a _really_ old Compaq Remote Insight Board - with Firefox, I get "ssl_error_no_cypher_overlap", but with Konqueror I get through. I need Firefox though as Konqueror doesn't quite cope with some Javascript on the first/login page. I guess Konqueror has support for some elderly cipher protocols, is there any way of finding out which and getting those to work in Firefox too?
No, Konqueror has nothing to do with this.. it is the underlying SSL library.. firefox uses NSS while konqueror uses openSSL, the latter in released openSUSE versions still offers obsolete/dangerous ciphersuites in the client hello.. (in factory it no longer does).
Thanks for that explanation. The problem with Konqueror appears not to be javascript, but java - I might be able to make some progress with this though. -- Per Jessen, Zürich (14.3°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
El 04/06/14 12:21, Per Jessen escribió:
Thanks for that explanation. The problem with Konqueror appears not to be javascript, but java - I might be able to make some progress with this though.
You are very likely out of luck, you may get java to work..unfortunately for this case java currently rejects self signed applets ..this is alays enforced .. your insight board most likely uses JWS and is very likely affected. Most of this devices need a firmware update with a fixed applet to continue working -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Cristian Rodríguez wrote:
El 04/06/14 12:21, Per Jessen escribió:
Thanks for that explanation. The problem with Konqueror appears not to be javascript, but java - I might be able to make some progress with this though.
You are very likely out of luck, you may get java to work..unfortunately for this case java currently rejects self signed applets ..this is alays enforced .. your insight board most likely uses JWS and is very likely affected.
It does look like the applet is being ignored, although I can't say for certain (other than it doesn't run).
Most of this devices need a firmware update with a fixed applet to continue working
Might be grasping at straws, but it's worth a try. -- Per Jessen, Zürich (14.3°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (4)
-
Cristian Rodríguez -
Felix Miata -
Istvan Gabor -
Per Jessen