Bug 11101 - autobuilder.yocto.io is not accessible from some browsers (due to invalid cipher?)
Summary: autobuilder.yocto.io is not accessible from some browsers (due to invalid cip...
Status: RESOLVED FIXED
Alias: None
Product: AutoBuilder
Classification: Infrastructure
Component: autobuilder (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Medium+ normal
Target Milestone: 2.3 M4
Assignee: Michael Halstead
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2017-02-23 14:39 UTC by Alexander Kanavin
Modified: 2017-05-05 22:37 UTC (History)
4 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Kanavin 2017-02-23 14:39:17 UTC 
Particularly Firefox on Debian testing/9 is affected: it gives a blank page without any error messages.

We suspect the issue is:
Server negotiated HTTP/2 with blacklisted suite
RSA 2048 (SHA256)   |  TLS 1.2  |  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA  |  ECDH secp256r1 

as reported by https://www.ssllabs.com/ssltest/analyze.html?d=autobuilder.yocto.io
Comment 1 Michael Halstead 2017-05-05 22:37:20 UTC 
The webserver is updated and the cipher settings modernized. It works for me across multiple browsers so I'm marking resolved. Please reopen if the problem persists for you.