Mailinglist Archive: opensuse (1125 mails)

[Wolfgang Rosenauer <wolfgang@xxxxxxxxxxxxx>]

Am 10.05.2012 11:28, schrieb Per Jessen:
> Dave Howorth wrote:
>
> > Bernhard Voelker wrote:
> > > On 05/10/2012 10:26 AM, Per Jessen wrote:
> > > > > BTW: "that simply didn't work" is not a very useful message.
> > > > I agree, but that is pretty much what Firefox tells me - "connection
> > > > reset".
> > >
> > > Hmm, that may mean that the server enforces an SSL handshake
> > > algorithm which FF does not allow (e.g. because it's too old and
> > > considered too weak). Does Opera show which algorithm is being used?
> >
> > Which might suggest that perhaps there's a newer version of the 3ware
> > server available?
>
> I did have a look for a newer 3dm2 (the webserver) - afaict, there isn't
> one, but I did come across this:
>
> http://kb.lsi.com/KnowledgebaseArticle16641.aspx
>
> It looks like patches (for multiple browsers) are underway. 

As Carlos wrote there are no patches underway but Firefox was fixed to
prevent certain attacks.
https://bugzilla.mozilla.org/show_bug.cgi?id=665814

This affects your 3dm2.

The other bug
https://bugzilla.mozilla.org/show_bug.cgi?id=702111
seems to describe broken server implementations.

It also describes a temporary workaround by exporting
NSS_SSL_CBC_RANDOM_IV=0
before starting Firefox.

Please try that and wait for a proper fix for your firmware.


Wolfgang
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx