Web based family history software

Question weblate not acccesible with Chrome

  • rola
  • Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
1 year 11 months ago #1 by rola
Using Chrome and Chrome-based (Opera) browsers the translate.webtrees.net/projects/webtrees/ gives the answer:

ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Not supported protocol

Using Firefox seems to be everything OK.

Is this a known problem? Or should I do something with my browser?

Ladislav

webtrees 2.0.24 + ⚶ Vesta modules (from cissee.de/ )
testing webtres 2.1.5 + ⚶ Vesta modules
on PHP Version 7.4.28

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #2 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
Which version of Chrome?

The translation server was recently updated to use TLSv1.3 instead of TLSv1.2

The documentation says that Chrome 70 (2018-10-16) should be able to use this - caniuse.com/tls1-3

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #3 by HRN
Replied by HRN on topic weblate not acccesible with Chrome
I get the same error message.
Chrome 100.0.4896.60

webtrees 2.1.18 at visitusinmaputo.com/webtree PHP 8.1.27
webtrees 2.1 dev on local Wampserver 3.3.2 PHP 8.2.13/8.3.0 MySQL 8.2.0

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #4 by HRN
Replied by HRN on topic weblate not acccesible with Chrome
IE11:

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to translate.webtrees.net again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.

webtrees 2.1.18 at visitusinmaputo.com/webtree PHP 8.1.27
webtrees 2.1 dev on local Wampserver 3.3.2 PHP 8.2.13/8.3.0 MySQL 8.2.0

Please Log in or Create an account to join the conversation.

  • rola
  • Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
1 year 11 months ago #5 by rola
Replied by rola on topic weblate not acccesible with Chrome
After todays upgrade of Chrome on PC it works.

The actual version of Opera (todays upgrade) it did not work.

On my smart phone version 99.xxxxxx do not work.

Ladislav

Ladislav

webtrees 2.0.24 + ⚶ Vesta modules (from cissee.de/ )
testing webtres 2.1.5 + ⚶ Vesta modules
on PHP Version 7.4.28

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #6 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
> IE11:

IE11 does not support TLSv1.3, so I do not expect it to work.

This is not my server, but I can get the configuration changed.

But I am curious to learn why it isn't working - when the documentation says that it should work...

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

  • makitso
  • Away
  • Administrator
  • Administrator
More
1 year 11 months ago #7 by makitso
Replied by makitso on topic weblate not acccesible with Chrome
Greg, looks like any Chromium-based browsers fail.

This site can’t provide a secure connectiontranslate.webtrees.net uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.

Rob
www.skatekey.net ( webtrees 2.1 beta GitHub)
webtrees forum admin
PHP 8.1.21
Hosted at tigertech.net

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago - 1 year 11 months ago #8 by pezball
Replied by pezball on topic weblate not acccesible with Chrome

I am curious to learn why it isn't working - when the documentation says that it should work...

Firefox browser info about the different SSL certificates may give a hint.

The URL " www.webtrees.net " (this site) uses encryption TLS_AES_256_GCM_SHA384, 256 bits, TLS 1.3, but "translate.webtrees.net" uses TLS_AES_128_GCM_SHA256, 128 bits, TLS 1.3

Perhaps the 128 bits is the key to the problem, not regarded secure enough anymore.
(And disqualifying lots of old hardware web interfaces too, such as routers, which often use outdated SHA1 certificates).
Last edit: 1 year 11 months ago by pezball.

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #9 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
This server is located at my employer. I will look again next week.

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #10 by pezball
Replied by pezball on topic weblate not acccesible with Chrome
It seems like this issue started with Chrome version 98.

But exactly which encryption techniques are incompatible, is still a mystery.

The encryption chain has many steps, starting with the web server version, which needs to be compatible with updated encryption modules. So exactly what is considered outdated, is not easy to tell, when Chrome only gives a mystical message.

Google has a goal to make a safer internet, but blocking unsafe sites without any additional information,
and in some cases forcing people to use regular HTTP to access older routers etc, is perhaps not a good idea for safety.

Any encryption is always better than nothing.

Please Log in or Create an account to join the conversation.

More
1 year 11 months ago #11 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
The config on this server was generated using the "modern" option at ssl-config.mozilla.org/

It passes the SSL Labs test with a grade "A" - www.ssllabs.com/ssltest/analyze.html?d=translate.webtrees.net

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

More
1 year 10 months ago - 1 year 10 months ago #12 by JustCarmen
Replied by JustCarmen on topic weblate not acccesible with Chrome
Greg, this still doesn't work:



Using Chrome (v101), but MS Edge gives a similar message.


Carmen
Designer of the JustLight theme (comes with a light and dark color palette), Fancy Imagebar, Fancy Research Links and Fancy Treeview for webtrees 2


Check my website at www.justcarmen.nl
Last edit: 1 year 10 months ago by JustCarmen.

Please Log in or Create an account to join the conversation.

More
1 year 10 months ago #13 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
This should now be fixed

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

More
1 year 4 months ago - 1 year 4 months ago #14 by xmlf
Replied by xmlf on topic weblate not acccesible with Chrome
It is still inaccessible.

NET::ERR_CERT_DATE_INVALID

The following are the most popular management tools in China.
1. SSL certificate:
github.com/acmesh-official/acme.sh
2. One-click deployment of lnmp tools
github.com/licess/lnmp
3. nginx configuration automatic generation: www.digitalocean.com/community/tools/nginx

Wang Family Website of Suining County, China
www.snwsjz.com
A family tree website that is customized, more humanized and convenient for users.
Last edit: 1 year 4 months ago by xmlf.

Please Log in or Create an account to join the conversation.

More
1 year 4 months ago #15 by fisharebest
Replied by fisharebest on topic weblate not acccesible with Chrome
I am aware of this problem. I hope to have a solution in the next week or two.

Greg Roach - greg@subaqua.co.uk - @fisharebest@phpc.social - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

More
1 year 4 months ago #16 by xmlf
Replied by xmlf on topic weblate not acccesible with Chrome
Thank you very much.
I'm happy to help if needed!

Wang Family Website of Suining County, China
www.snwsjz.com
A family tree website that is customized, more humanized and convenient for users.

Please Log in or Create an account to join the conversation.

Powered by Kunena Forum
}