On 10/05/2016 17:15, Ray_Net wrote: > But for this url: https://mondossier.rrn.fgov.be/?locale=fr > > SM -AND- IE cannot show the page :-)
Weird, SSL Labs give it an excellent score: https://www.ssllabs.com/ssltest/analyze.html?d=mondossier.rrn.fgov.be An error occurred during a connection to mondossier.rrn.fgov.be. SSL peer was unable to negotiate an acceptable set of security parameters. (Error code: ssl_error_handshake_failure_alert) OpenSSL 1.0.2c 12 Jun 2015 mentions: 2283200:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1472:SSL alert number 40 2283200:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177: $ openssl s_client -connect mondossier.rrn.fgov.be:443 CONNECTED(00000003) depth=2 C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 verify return:1 depth=1 C = BE, O = QuoVadis Trustlink BVBA, CN = QuoVadis Europe SSL CA G1 verify return:1 depth=0 C = BE, ST = Brussel Hoofdstad, L = Brussel, O = Federale Overheidsdienst Binnenlandse Zaken, OU = RRN, CN = mondossier.rrn.fgov.be verify return:1 2283200:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1472:SSL alert number 40 2283200:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177: --- Certificate chain 0 s:/C=BE/ST=Brussel Hoofdstad/L=Brussel/O=Federale Overheidsdienst Binnenlandse Zaken/OU=RRN/CN=mondossier.rrn.fgov.be i:/C=BE/O=QuoVadis Trustlink BVBA/CN=QuoVadis Europe SSL CA G1 1 s:/C=BE/O=QuoVadis Trustlink BVBA/CN=QuoVadis Europe SSL CA G1 i:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 2 s:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 i:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 --- Server certificate -----BEGIN CERTIFICATE----- MIIGLjCCBBagAwIBAgIUfHo9dHR4Qqe/LTzshqVOiI8HJXEwDQYJKoZIhvcNAQEL BQAwUzELMAkGA1UEBhMCQkUxIDAeBgNVBAoTF1F1b1ZhZGlzIFRydXN0bGluayBC VkJBMSIwIAYDVQQDExlRdW9WYWRpcyBFdXJvcGUgU1NMIENBIEcxMB4XDTE1MDgw NzEyMjcxMloXDTE4MDgwNzEyMzcwMFowgaAxCzAJBgNVBAYTAkJFMRowGAYDVQQI DBFCcnVzc2VsIEhvb2Zkc3RhZDEQMA4GA1UEBwwHQnJ1c3NlbDE0MDIGA1UECgwr RmVkZXJhbGUgT3ZlcmhlaWRzZGllbnN0IEJpbm5lbmxhbmRzZSBaYWtlbjEMMAoG A1UECwwDUlJOMR8wHQYDVQQDDBZtb25kb3NzaWVyLnJybi5mZ292LmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYwce/qrfSSnDO6bJT9mx1yxz3i RVbsl9kl4p6WrVl1Thb/xBYTaW74NssuGx8S4zx4wu2HjOdJHZ1eAoVaaINduN6B 0+eYXKVg6ZfEO5NkPZZDeefd3RfxCPxL6BWaWD90N5oI9kx6wVC5MkYIjZD7JArJ ccpB6hDZobEX9geJBsbDELa3dEmOxtwd4rhEAS67S1DVdIN3H+mMIVkDlTsBCae0 bkfhGPancbqr89qFEneYo1Qls6WzFK0z6smRjUsjoG9PcbHKQe7sYAXBavSSayW/ vn1n1GVLpZc9MujAI862Tao1R8FADuXoItM4j4JwVo12AFhyK5rW3pX7lwIDAQAB o4IBqjCCAaYwdAYIKwYBBQUHAQEEaDBmMDgGCCsGAQUFBzAChixodHRwOi8vdHJ1 c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2ZXVzc2wxLmNydDAqBggrBgEFBQcwAYYe aHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMB0GA1UdDgQWBBSUn8BGUh+I R9IvRQsQZqICFZp9OjAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFELTh3PhntM+ XP6wcLvK3iG6JHk2MFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYB BQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20v cXZldXNzbDEuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwIQYDVR0RBBowGIIWbW9uZG9zc2llci5ycm4uZmdvdi5iZTAN BgkqhkiG9w0BAQsFAAOCAgEAWhDBy/NWVg47HRuchmM4eb6kNI4TjF63SVgLNrMh OABNxlPLXYaSMoHVepbYHNOQg6re2KVXGdwMnZtqRQIMIZGmXiIFkof+vpyMaRk1 HNvG7W899idz63VnF0YnutzY8cNcMOiKcxKg/yc9B0CRoq2v2KMg2HLzXEn24mbq xvjGHdOSH+BKF4SU8XV9qGr1cP/i0gHPjfA8HyfqLSTgYn+pnJ9ri1zz+qsLNs5t N03/jyYT8caqD+kAnCxf5KwaFfAMo3Sm6dt+JoeYs1woSiAo8r35gd/pkKA1ZTp8 QE8rH8yIG0pctVFB6cnyC/siWIlqLQxuV+VLs+pcqDevVAND+6o7Bf0EUKKkKfyz dxXlibIT/9SRnkQo52NSMUUMi3H+3Ql5JFRC8IO0LiHNF8pYX01El4dNzm5wAkPj jRGxzTmLcozRjjVBDAHESWuwe+oH4ExmRwJC1EyyCSTlZrSrJl++x3vHMDFb3i7O dn6JanAjJ8deqW+FTpXxT1fG50CwxHNckc7wbivb0F8vVNV1nExywxGOLjzVuPw5 iTMeOnbb7T2+zMNJAoRtVooCf4He2t2RLKXz5SdsHZevQFRjfndgkd/6yH5N5TFR 3o7BUQPv0lPYbmGojCRSV+s0oCPI55RQkJ2PIBrVLeKu75zAQuY6gJVSwbgaq3YE w44= -----END CERTIFICATE----- subject=/C=BE/ST=Brussel Hoofdstad/L=Brussel/O=Federale Overheidsdienst Binnenlandse Zaken/OU=RRN/CN=mondossier.rrn.fgov.be issuer=/C=BE/O=QuoVadis Trustlink BVBA/CN=QuoVadis Europe SSL CA G1 --- Acceptable client certificate CA names /C=BE/CN=Belgium Root CA2 /C=BE/CN=Belgium Root CA3 /C=BE/CN=Belgium Root CA4 /C=BE/CN=Citizen CA/serialNumber=201001 /C=BE/CN=Citizen CA/serialNumber=201002 /C=BE/CN=Citizen CA/serialNumber=201003 /C=BE/CN=Citizen CA/serialNumber=201004 /C=BE/CN=Citizen CA/serialNumber=201005 /C=BE/CN=Citizen CA/serialNumber=201006 /C=BE/CN=Citizen CA/serialNumber=201007 /C=BE/CN=Citizen CA/serialNumber=201008 /C=BE/CN=Citizen CA/serialNumber=201009 /C=BE/CN=Citizen CA/serialNumber=201010 /C=BE/CN=Citizen CA/serialNumber=201011 /C=BE/CN=Citizen CA/serialNumber=201012 /C=BE/CN=Citizen CA/serialNumber=201101 /C=BE/CN=Citizen CA/serialNumber=201102 /C=BE/CN=Citizen CA/serialNumber=201103 /C=BE/CN=Citizen CA/serialNumber=201104 /C=BE/CN=Citizen CA/serialNumber=201105 /C=BE/CN=Citizen CA/serialNumber=201106 /C=BE/CN=Citizen CA/serialNumber=201107 /C=BE/CN=Citizen CA/serialNumber=201108 /C=BE/CN=Citizen CA/serialNumber=201201 /C=BE/CN=Citizen CA/serialNumber=201202 /C=BE/CN=Citizen CA/serialNumber=201204 /C=BE/CN=Citizen CA/serialNumber=201205 /C=BE/CN=Citizen CA/serialNumber=201206 /C=BE/CN=Citizen CA/serialNumber=201207 /C=BE/CN=Citizen CA/serialNumber=201208 /C=BE/CN=Citizen CA/serialNumber=201209 /C=BE/CN=Citizen CA/serialNumber=201210 /C=BE/CN=Citizen CA/serialNumber=201211 /C=BE/CN=Citizen CA/serialNumber=201212 /C=BE/CN=Citizen CA/serialNumber=201301 /C=BE/CN=Citizen CA/serialNumber=201302 /C=BE/CN=Citizen CA/serialNumber=201303 /C=BE/CN=Citizen CA/serialNumber=201304 /C=BE/CN=Citizen CA/serialNumber=201305 /C=BE/CN=Citizen CA/serialNumber=201306 /C=BE/CN=Citizen CA/serialNumber=201307 /C=BE/CN=Citizen CA/serialNumber=201308 /C=BE/CN=Citizen CA/serialNumber=201309 /C=BE/CN=Citizen CA/serialNumber=201310 /C=BE/CN=Citizen CA/serialNumber=201311 /C=BE/CN=Citizen CA/serialNumber=201312 /C=BE/CN=Citizen CA/serialNumber=201401 /C=BE/CN=Citizen CA/serialNumber=201402 /C=BE/CN=Citizen CA/serialNumber=201403 /C=BE/CN=Citizen CA/serialNumber=201404 /C=BE/CN=Citizen CA/serialNumber=201405 /C=BE/CN=Citizen CA/serialNumber=201406 /C=BE/CN=Citizen CA/serialNumber=201407 /C=BE/CN=Citizen CA/serialNumber=201408 /C=BE/CN=Citizen CA/serialNumber=201409 /C=BE/CN=Citizen CA/serialNumber=201410 /C=BE/CN=Citizen CA/serialNumber=201411 /C=BE/CN=Citizen CA/serialNumber=201412 /C=BE/CN=Citizen CA/serialNumber=201413 /C=BE/CN=Citizen CA/serialNumber=201414 /C=BE/CN=Citizen CA/serialNumber=201415 /C=BE/CN=Citizen CA/serialNumber=201416 /C=BE/CN=Citizen CA/serialNumber=201417 /C=BE/CN=Citizen CA/serialNumber=201418 /C=BE/CN=Citizen CA/serialNumber=201419 /C=BE/CN=Citizen CA/serialNumber=201420 /C=BE/CN=Citizen CA/serialNumber=201501 /C=BE/CN=Citizen CA/serialNumber=201502 /C=BE/CN=Citizen CA/serialNumber=201503 /C=BE/CN=Citizen CA/serialNumber=201504 /C=BE/CN=Citizen CA/serialNumber=201505 /C=BE/CN=Citizen CA/serialNumber=201506 /C=BE/CN=Citizen CA/serialNumber=201507 /C=BE/CN=Citizen CA/serialNumber=201508 /C=BE/CN=Citizen CA/serialNumber=201509 /C=BE/CN=Citizen CA/serialNumber=201510 /C=BE/CN=Citizen CA/serialNumber=201511 /C=BE/CN=Citizen CA/serialNumber=201512 /C=BE/CN=Citizen CA/serialNumber=201513 /C=BE/CN=Citizen CA/serialNumber=201514 /C=BE/CN=Citizen CA/serialNumber=201515 /C=BE/CN=Citizen CA/serialNumber=201516 /C=BE/CN=Citizen CA/serialNumber=201517 /C=BE/CN=Citizen CA/serialNumber=201518 /C=BE/CN=Citizen CA/serialNumber=201519 /C=BE/CN=Citizen CA/serialNumber=201520 /C=BE/CN=Citizen CA/serialNumber=201601 /C=BE/CN=Citizen CA/serialNumber=201602 /C=BE/CN=Citizen CA/serialNumber=201603 /C=BE/CN=Citizen CA/serialNumber=201604 /C=BE/CN=Citizen CA/serialNumber=201605 /C=BE/CN=Citizen CA/serialNumber=201606 /C=BE/CN=Citizen CA/serialNumber=201607 /C=BE/CN=Citizen CA/serialNumber=201608 /C=BE/CN=Citizen CA/serialNumber=201609 /C=BE/CN=Citizen CA/serialNumber=201610 /C=BE/CN=Citizen CA/serialNumber=201621 /C=BE/CN=Citizen CA/serialNumber=201622 /C=BE/CN=Citizen CA/serialNumber=201623 /C=BE/CN=Citizen CA/serialNumber=201624 /C=BE/CN=Citizen CA/serialNumber=201625 /C=BE/CN=Citizen CA/serialNumber=201626 /C=BE/CN=Citizen CA/serialNumber=201627 /C=BE/CN=Citizen CA/serialNumber=201628 /C=BE/CN=Citizen CA/serialNumber=201629 /C=BE/CN=Citizen CA/serialNumber=201630 /C=BE/CN=Citizen CA/serialNumber=201631 /C=BE/CN=Citizen CA/serialNumber=201632 /C=BE/CN=Citizen CA/serialNumber=201633 /C=BE/CN=Citizen CA/serialNumber=201634 /C=BE/CN=Government AA/serialNumber=2010 /C=BE/CN=Government AA/serialNumber=2011 /C=BE/CN=Government CA/serialNumber=2010 /C=BE/CN=Government CA/serialNumber=2011 /C=BE/CN=Foreigner CA/serialNumber=201001 /C=BE/CN=Foreigner CA/serialNumber=201002 /C=BE/CN=Foreigner CA/serialNumber=201101 /C=BE/CN=Foreigner CA/serialNumber=201102 /C=BE/CN=Foreigner CA/serialNumber=201201 /C=BE/CN=Foreigner CA/serialNumber=201202 /C=BE/CN=Foreigner CA/serialNumber=201203 /C=BE/CN=Foreigner CA/serialNumber=201204 /C=BE/CN=Foreigner CA/serialNumber=201301 /C=BE/CN=Foreigner CA/serialNumber=201302 /C=BE/CN=Foreigner CA/serialNumber=201303 /C=BE/CN=Foreigner CA/serialNumber=201304 /C=BE/CN=Foreigner CA/serialNumber=201401 /C=BE/CN=Foreigner CA/serialNumber=201402 /C=BE/CN=Foreigner CA/serialNumber=201404 /C=BE/CN=Foreigner CA/serialNumber=201405 /C=BE/CN=Foreigner CA/serialNumber=201501 /C=BE/CN=Foreigner CA/serialNumber=201502 /C=BE/CN=Foreigner CA/serialNumber=201503 /C=BE/CN=Foreigner CA/serialNumber=201504 /C=BE/CN=Foreigner CA/serialNumber=201505 /C=BE/CN=Foreigner CA/serialNumber=201601 /C=BE/CN=Foreigner CA/serialNumber=201602 /C=BE/CN=Foreigner CA/serialNumber=201603 /C=BE/CN=Foreigner CA/serialNumber=201606 /C=BE/CN=Foreigner CA/serialNumber=201607 /C=BE/CN=Foreigner CA/serialNumber=201608 /C=BE/CN=Government AA/serialNumber=201201 /C=BE/CN=Government AA/serialNumber=201202 /C=BE/CN=Government AA/serialNumber=201301 /C=BE/CN=Government AA/serialNumber=201401 /C=BE/CN=Government AA/serialNumber=201402 /C=BE/CN=Government AA/serialNumber=201501 /C=BE/CN=Government CA/serialNumber=201201 /C=BE/CN=Government CA/serialNumber=201202 /C=BE/CN=Government CA/serialNumber=201301 /C=BE/CN=Government CA/serialNumber=201401 /C=BE/CN=Government CA/serialNumber=201402 /C=BE/CN=Government CA/serialNumber=201501 /O=Cybertrust, Inc/CN=Cybertrust Global Root /C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 /C=BE/O=QuoVadis Trustlink BVBA/CN=QuoVadis Europe SSL CA G1 /C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root /C=BE/ST=Brabant/L=Brussel/O=RRN/OU=Netwerk/CN=intrrnRootCA /C=Unknown/ST=Unknown/L=Unknown/O=Unknown/OU=Unknown/CN=proxy202.intrrn.be /C=BE/CN=Citizen CA/serialNumber=201203 Client Certificate Types: RSA sign, DSA sign, ECDSA sign Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1 Shared Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1 Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 14283 bytes and written 138 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: Session-ID-ctx: Master-Key: C0F74A82D1D3D4BA4741610D40C72F4E0E64B75998E0C1EC769C5ECB0A126FBFD55C00C6A99E5E5BA8B227F7E04AFA0C Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1462901048 Timeout : 300 (sec) Verify return code: 0 (ok) --- Regards. _______________________________________________ support-seamonkey mailing list [email protected] https://lists.mozilla.org/listinfo/support-seamonkey
