1

I cannot access a website even my certificate is valid. Since I got the Firefox update 38.0.1 I get the error code: ssl_error_renegotiation_not_allowed. In the about:config I cannot find it. What can I do? Thanks for helping me. rgds Karin

4
  • 1
    Useful reading to understand why you get this message: SSL and TLS renegotiation vulnerability.
    – Hennes
    Commented May 19, 2015 at 9:20
  • Oh, since it is an SSL (and not a Firefox issue) there is likely no button for it in Firefox.
    – Hennes
    Commented May 19, 2015 at 9:21
  • Here is Firefox specific info, however I don't know which of the options are still valid in current FF version - wiki.mozilla.org/Security:Renegotiation
    – Marki555
    Commented May 19, 2015 at 9:58
  • 1
    The error is not because of SSL certificate, but because the remote server uses an older and vulnerable SSL library version, which does not support secure renegotiation.
    – Marki555
    Commented May 19, 2015 at 9:59

1 Answer 1

-1

Firefox 38 has removed the option to reenable insecure renegotiation. See https://bugzilla.mozilla.org/show_bug.cgi?id=1123020

The best solution is to ask the server admin to patch their servers.

1
  • 1
    Can you cite a source for this?
    – fixer1234
    Commented Jul 4, 2015 at 4:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .