[cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page

[Gary Parker]

Hi folks, I spoke to our security guy about this this afternoon when a couple of my staff who run Firefox, ran afoul of the issue. He recommended the same workaround but advised that this option will be removed in future versions of Firefox (and likely Chrome and Mozilla, also).

Cisco either need to release a patch to increase the Diffy-Hellman keysize for these servers or publish a hoot guide for us to do it ourselves.

---
/-Gary Parker----------------------------------f--\
|     Unified Communications Service Manager      |
n      Loughborough University, IT Services       |
|     tel:+441509635635 im:ccgjp at lboro.ac.uk      o
|     http://delphium.lboro.ac.uk/pubkey.txt      |
\r----------------------------------------------d-/

> On 9 Jul 2015, at 21:07, Charles Goldsmith <wokka at justfamily.org> wrote:
> 
> Thanks Ryan and Dennis, that did the trick!
> 
> On Thu, Jul 9, 2015 at 1:55 PM, Heim, Dennis <Dennis.Heim at wwt.com> wrote:
> <image005.png>
> 
>  
> 
> Dennis Heim | Emerging Technology Architect (Collaboration)
> 
> World Wide Technology, Inc. | +1 314-212-1814
> 
> <image006.png>
> 
> <image007.png><image008.png><image009.png>
> 
> “There is a fine line between Wrong and Visionary. Unfortunately, you have to be a visionary to see it." – Sheldon Cooper
> 
>  
> 
> Click here to join me in my Collaboration Meeting Room
> 
>  
> 
> From: Ryan Huff [mailto:ryanhuff at outlook.com] 
> Sent: Thursday, July 09, 2015 3:55 PM
> To: Heim, Dennis; Charles Goldsmith; voip puck
> Subject: RE: [cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page
> 
>  
> 
> Here is a good explanation of the issue and how to work around it:
> 
> http://eltonoverip.com/blog/2015/07/firefox-39-0-ssl-error-weak-ephemeral-diffie-hellman-key/
> 
> From: Dennis.Heim at wwt.com
> To: wokka at justfamily.org; cisco-voip at puck.nether.net
> Date: Thu, 9 Jul 2015 19:53:09 +0000
> Subject: Re: [cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page
> 
> There is a parameter for those the keys that you need to toggle to disable and then it will work. Not sure of the true impact of that, but that is what I changed.