topic RE: 800 series Switch - Web Interface no accessable - because of outdated ciphers in ExtremeSwitching (EOS)

800 series Switch - Web Interface no accessable - because of outdated ciphers

M_Nees — Fri, 13 Jan 2017 03:22:00 GMT

My customer have serveral small 800 series switches. Currently we cannot access web interface because recent browsers (firefox / chrome) deny the used out-dated ciphers.

Researching last available firmware / manual confirm there are only out-dated chiphers available:

enable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5

How can i get that the browser will accept these currently used ciphers ?

Are there any plans of extreme networks to update this on a product that is currently on sale ?

Regards

RE: 800 series Switch - Web Interface no accessable - because of outdated ciphers

Daniel_Coughlin — Fri, 13 Jan 2017 03:37:00 GMT

Matthias,

In regards to updating the ciphers we will need to talk with engineering. I sent them a note but we may need to open a formal case for this.

RE: 800 series Switch - Web Interface no accessable - because of outdated ciphers

M_Nees — Fri, 13 Jan 2017 03:58:00 GMT

Hi Daniel,

Case: 01274825 opened.

Regards

RE: 800 series Switch - Web Interface no accessable - because of outdated ciphers

Ronald_Dvorak — Fri, 13 Jan 2017 04:23:00 GMT

https://community.extremenetworks.com/extreme/topics/browser-end-of-sha1-support

Is that exactly what I've asked for 3 weeks ago ... a list of affected devices/versions ?