From owner-freebsd-questions@freebsd.org  Sat Jul 25 13:51:28 2015
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0AB8F9AAB20
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Sat, 25 Jul 2015 13:51:28 +0000 (UTC)
 (envelope-from freebsd@edvax.de)
Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id BF9DD15A8
 for <freebsd-questions@freebsd.org>; Sat, 25 Jul 2015 13:51:27 +0000 (UTC)
 (envelope-from freebsd@edvax.de)
Received: from r56.edvax.de (port-92-195-110-127.dynamic.qsc.de
 [92.195.110.127])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx02.qsc.de (Postfix) with ESMTPS id AAFC124A0E;
 Sat, 25 Jul 2015 15:51:25 +0200 (CEST)
Received: from r56.edvax.de (localhost [127.0.0.1])
 by r56.edvax.de (8.14.5/8.14.5) with SMTP id t6PDpPR6002343;
 Sat, 25 Jul 2015 15:51:25 +0200 (CEST)
 (envelope-from freebsd@edvax.de)
Date: Sat, 25 Jul 2015 15:51:25 +0200
From: Polytropon <freebsd@edvax.de>
To: parv@pair.com
Cc: CK <nibbana@gmx.us>, freebsd-questions@freebsd.org
Subject: Re: FreeBSD Forum access problem (was Re: Endless Data Loss)
Message-Id: <20150725155125.24fde20a.freebsd@edvax.de>
In-Reply-To: <20150725090259.GA1943@holstein.holy.cow>
References: <0MRCCJ-1ZUCcr1rAt-00UeQk@mail.gmx.com>
 <20150725090259.GA1943@holstein.holy.cow>
Reply-To: Polytropon <freebsd@edvax.de>
Organization: EDVAX
X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Jul 2015 13:51:28 -0000

On Fri, 24 Jul 2015 23:02:59 -1000, parv@pair.com wrote:
> in message <0MRCCJ-1ZUCcr1rAt-00UeQk@mail.gmx.com>,
> wrote CK thusly...
> >
> ...
> > FreeBSD forums blocks my access, possibly because I don't have a
> > high-speed connection, so I can't read the material there.
> ...
> 
> Most likely you have problems with SSL or security certificates. I
> cannot access the forum via Opera 12.16 but have no problem with
> Firefox 39.

I've tried back and forth with Opera (version 11.50/1074 here).
>From "about:config" with the search terms "tls" and "ssl" and
through Tools -> Preferences -> Advanced -> Security... I just
keep getting this "helpful" message:

	https://forums.freebsd.org/

	Error

	Could not connect to remote server
	Check that the address is spelled correctly,
	or try searching for the site.

Do I have to manually install some certificates, manually add
a CA, or maybe disable one? Is there a known combination of
settings that will work?

	Certificate revocation lists for ssl
	Crypto Method Overrides
	Enable SSL v3
	Enable TLS v1.0
	Enable TLS v1.1
	Enable TLS v1.2
	Minimum Security Level
	OCSP Validate Certificates
	Strict EV Mode

I think those are the relevant settings. But how to actually
set them so the FreeBSD forum will be pleased? :-)




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...