<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"><head><!--[if gte mso 9]><xml><o:OfficeDocumentSettings><o:AllowPNG/><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings></xml><![endif]--></head><body>
<div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">Thanks Matt, adding a call to SSL_CTX_set_ecdh_auto() on the server side actually did the trick. Problem solved!!!</span></div><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">/Patrick </span></div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);"><br></span></div>Contrary to what you said in your original post the chrome session is NOT<br>selecting 0xc02f. Instead it is selecting 0x002f which is<br>TLS_RSA_WITH_AES_128_CBC_SHA (aka AES128-SHA in the OpenSSL naming scheme).<br><br>This cipher is not being offered by firefox but is by chrome. It is striking to<br>note that although chrome is offering a whole list of ciphersuites offering<br>forward secrecy (i.e. all those including ECDHE/DHE), the server is instead<br>selecting a very old ciphersuite that does not support forward secrecy.<br><br>In comparison firefox does not offer any ciphersuites that do not support<br>forward secrecy and the connection fails.<br><br>Have you called SSL_CTX_set_tmp_dh() or SSL_CTX_set_ecdh_auto() on the server?<br>I'd suggest trying those and see if it helps.<br><br>Matt<br></span><br><br><a href="https://overview.mail.yahoo.com/?.src=iOS">Sent from Yahoo Mail for iPhone</a><br>
</body></html>