<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Here is the Cisco security advisory for the OpenSSL flaw found in June/2015 .... Long, Long list of products affected:<br><br>http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl<br><br>-Thanks,<br><br>Ryan<br><br><br><div><hr id="stopSpelling">From: ryanhuff@outlook.com<br>To: dennis.heim@wwt.com; wokka@justfamily.org; cisco-voip@puck.nether.net<br>Subject: RE: [cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page<br>Date: Thu, 9 Jul 2015 15:55:04 -0400<br><br>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr">Here is a good explanation of the issue and how to work around it:<br><br>http://eltonoverip.com/blog/2015/07/firefox-39-0-ssl-error-weak-ephemeral-diffie-hellman-key/<br><br><div><hr id="ecxstopSpelling">From: Dennis.Heim@wwt.com<br>To: wokka@justfamily.org; cisco-voip@puck.nether.net<br>Date: Thu, 9 Jul 2015 19:53:09 +0000<br>Subject: Re: [cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page<br><br>
<style><!--
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal {
font-size:12.0pt;
font-family:"Times New Roman",serif;
}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink {
color:#0563C1;
text-decoration:underline;
}
.ExternalClass span.ecxMsoHyperlinkFollowed {
color:#954F72;
text-decoration:underline;
}
.ExternalClass span.ecxEmailStyle17 {
font-family:"Calibri",sans-serif;
color:#1F497D;
}
.ExternalClass .ecxMsoChpDefault {
font-family:"Calibri",sans-serif;
}
.ExternalClass div.ecxWordSection1 {
}
--></style>
<div class="ecxWordSection1">
<p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;">There is a parameter for those the keys that you need to toggle to disable and then it will work. Not sure of the true impact of that, but that is what I changed.</span></p>
<p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;"> </span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><b><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:black;">Dennis Heim | Emerging Technology Architect (Collaboration)</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black;"></span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:black;">World Wide Technology, Inc. | +1 314-212-1814</span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:blue;text-decoration:none;"><img id="ecxPicture_x0020_1" src="cid:image001.png@01D0BA5F.4AD16240" alt="twitter" height="25" border="0" width="124"></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black;"></span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><a target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none;"><img id="ecxPicture_x0020_2" src="cid:image002.png@01D0BA5F.4AD16240" alt="chat" height="28" border="0" width="95"></span></a><a target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none;"><img id="ecxPicture_x0020_3" src="cid:image003.png@01D0BA5F.4AD16240" alt="Phone" height="28" border="0" width="95"></span></a><a target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none;"><img id="ecxPicture_x0020_4" src="cid:image004.png@01D0BA5F.4AD16240" alt="video" height="28" border="0" width="95"></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;"></span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#1F497D;">“There is a fine line between Wrong and Visionary. Unfortunately, you have to be a visionary to see it." – Sheldon Cooper</span></p>
<p class="ecxMsoNormal" style="text-autospace:none;"><span style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#1F497D;"> </span></p>
<p class="ecxMsoNormal"><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:blue;"><a href="https://wwt.webex.com/meet/dennis.heim" target="_blank"><span style="color:#0563C1;">Click here to join me in my Collaboration Meeting Room</span></a></span></u><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#0563C1;"></span></u></p>
<p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;"> </span></p>
<p class="ecxMsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;"> cisco-voip [mailto:cisco-voip-bounces@puck.nether.net]
<b>On Behalf Of </b>Charles Goldsmith<br>
<b>Sent:</b> Thursday, July 09, 2015 3:50 PM<br>
<b>To:</b> voip puck<br>
<b>Subject:</b> [cisco-voip] firefox upgrade causing issues with CUCM CCMadmin page</span></p>
<p class="ecxMsoNormal"> </p>
<div>
<p class="ecxMsoNormal">Getting this error with Firefox 39</p>
<div>
<div>
<p class="ecxMsoNormal">An error occurred during a connection to 10.52.122.26. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)</p>
</div>
<div>
<p class="ecxMsoNormal"> </p>
</div>
<div>
<p class="ecxMsoNormal"> The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.</p>
</div>
<div>
<p class="ecxMsoNormal"> Please contact the website owners to inform them of this problem.</p>
</div>
</div>
<div>
<p class="ecxMsoNormal"> </p>
</div>
<div>
<p class="ecxMsoNormal">I've seen this on 8.6.2 and 9.1.2, the two 10.5.x systems I have access to have 3rd party certs, and they both work fine. The 8.x and 9.x systems do not have 3rd party, just internally signed.</p>
</div>
<div>
<p class="ecxMsoNormal"> </p>
</div>
<div>
<p class="ecxMsoNormal">Anyone else seeing this and know a work around? I detest using IE or Safari for CUCM work.</p>
</div>
</div>
</div>
<br>_______________________________________________
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip</div> </div></div> </div></body>
</html>