[Fixed] HTTPS is BROKEN since V1.27

Slimjet bug reports
7bfb4bef
Posts: 29
Joined: Mon Oct 20, 2014 4:00 pm

[Fixed] HTTPS is BROKEN since V1.27

Post by 7bfb4bef »

Since UPGRADING to V1.27 AND V1.28 (beta releases) HTTPS is BROKEN on sites I Visit when using Slim Jet but NOT if I use GOOGLE CHROME (Version 38.0.2125.104 m), OPERA [Version 25.0.1614.50] or Mozilla Firefox [Version 33.0] ALL 32 Bit.

I am currently using V1.28 released earlier today on Windows Vista Home Premium 32, 3 GB RAM ....

So far I am unable to view and/or LOGIN to these SECURE SITES:
https://secure.dslreports.com/ [it uses TLS 1.0]
https://online.1stnb.com/ [it uses SSL 3.0 AES 256_CBC DHS1 RSA]


Error message: "Error code: ERR_SSL_VERSION_OR_CIPHER_MISMATCH"

I might find MORE over the next few days.

I am guessing this has to do with the "SSL 3.0 / POODLE" EXPLOIT/VULNERABILITY DOWNGRADE.

edit>
I enabled SSL 3.0, exited and restarted SlimJet with out success to the second site I listed above. Chatted with their tech support people and they watched me attempt to access the site and determined IT IS A SLIMJET BROWSER PROBLEM WITH SSL 3.0.

dev
Posts: 761
Joined: Mon Apr 21, 2014 10:30 pm

Re: HTTPS is BROKEN since V1.27

Post by dev »

I enabled SSL 3.0 and restarted but then i checked the setting again and it had frozen at TLS 1.0, I cannot alter the settings at all now. I'm wondering if that's happened to you as well?

7bfb4bef
Posts: 29
Joined: Mon Oct 20, 2014 4:00 pm

Re: HTTPS is BROKEN since V1.27

Post by 7bfb4bef »

After restarting It shows SSL 3.0 when I go to Settings / Minimum SSL Version. I can change it to any of the acceptable values (SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2) via the drop-down menu and stays at my selection even after a browser exit and restart.

6677igor
Posts: 3
Joined: Mon Oct 20, 2014 5:35 pm

Error of the entrance

Post by 6677igor »

Safe connection with the server does not succeed in creating. The problem could arise on the server, or was necessary the certificate of client autentifikatsii, which in you is absent.
Code of the error: ERR_SSL_PROTOCOL_ERROR

this problem began from the version Of slimjet 1.2.7.0 beta and in 1.2.8.0 without the changes, turning offs of antivirus does not help. In other browsers all is normal.

jeffhere
Posts: 175
Joined: Mon Jul 28, 2014 7:59 am

Re: HTTPS is BROKEN since V1.27

Post by jeffhere »

7bfb4bef wrote:After restarting It shows SSL 3.0 when I go to Settings / Minimum SSL Version. I can change it to any of the acceptable values (SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2) via the drop-down menu and stays at my selection even after a browser exit and restart.

So did it work then? I tried the example sites you provided, DSLreports was ok (I could view the site). The other, yes failed at first try for me too.
JSPic0001.gif

7bfb4bef
Posts: 29
Joined: Mon Oct 20, 2014 4:00 pm

Re: HTTPS is BROKEN since V1.27

Post by 7bfb4bef »

DSlReports works but the other one (it's a banking site) is STILL BROKEN no matter what "encryption" I try.

flashpeak
Site Admin
Posts: 369
Joined: Mon Apr 21, 2014 3:57 pm

Re: HTTPS is BROKEN since V1.27

Post by flashpeak »

Can you update to 1.2.9 and try the 2nd site again with minimum ssl version to set to ssl 3.0?
7bfb4bef wrote:DSlReports works but the other one (it's a banking site) is STILL BROKEN no matter what "encryption" I try.
Stephen Cheng
FlashPeak Inc.

flashpeak
Site Admin
Posts: 369
Joined: Mon Apr 21, 2014 3:57 pm

Re: Error of the entrance

Post by flashpeak »

Can you try 1.2.9 (set Minimum SSL version in Settings->Security to SSL 3.0 to be compatible with legacy servers)?
Stephen Cheng
FlashPeak Inc.

7bfb4bef
Posts: 29
Joined: Mon Oct 20, 2014 4:00 pm

Re: HTTPS is BROKEN since V1.27

Post by 7bfb4bef »

Attempted to download with SlimJet but it is a REAL slow download ETA OVER 1 hour to finish download... Canceled d/l and opened SlimBrowser not much better but at least it thinks it will complete d/l in about 30 - 40 minutes,
Problem is at YOUR D/L SERVER'S END. I can d/l from anywhere else and it zips along fine.

7bfb4bef
Posts: 29
Joined: Mon Oct 20, 2014 4:00 pm

Re: HTTPS is BROKEN since V1.27

Post by 7bfb4bef »

Downloaded, installed and can confirm it is working as of now.

Locked