kikuchiyo
Level: Master Delver
Rank Points: 107
Registered: 04-01-2012
IP: Logged

I wanted to purchase the yearly renewal of my Caravelnet membership, but I couldn't: when I click on the "Buy now" link, I get redirected to the payment site, but the browser doesn't let me continue, displaying the following notification:

Secure Connection Failed

An error occurred during a connection to secure.bmtmicro.com. Unsupported hash algorithm used by TLS peer.

Error code: SSL_ERROR_UNSUPPORTED_HASH_ALGORITHM

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

Can you please notify their sysadmin, and ask them to drag their SSL setup to the 21st century?

(I'm trying from Firefox under Linux, but I think any up-to-date, modern browser will respond with a similar error message.)

Tuttle
Level: Smitemaster

Rank Points: 1545
Registered: 02-22-2003
IP: Logged

I'm leaning towards either a glitch they've already fixed, or something more local to your setup/network/ISP. Works fine for me in Firefox 92 for Windows, and https://www.ssllabs.com/ssltest/analyze.html?d=secure.bmtmicro.com shows fairly modern crypto without any support for legacy stuff.

kikuchiyo
Level: Master Delver
Rank Points: 107
Registered: 04-01-2012
IP: Logged

It turns out that the flavor of linux matters: Fedora, which I'm using, has recently made their system-wide crypto policies more strict. As a result, some sites appear broken, no matter the browser.

I'm not quite sure what part of BTMicro's setup was found wanting, but a potential workaround is to temporarily weaken the system crypto policy:

sudo update-crypto-policies --set DEFAULT:FEDORA32

Then restart the browser, do your stuff, then

sudo update-crypto-policies --set DEFAULT

when done.

mrimer
Level: Legendary Smitemaster

Rank Points: 5056
Registered: 02-04-2003
IP: Logged

Wow, good to know. I'm all for having secure crypto, especially with our payment processors. Meanwhile, I appreciate you posting a workaround.

____________________________
Gandalf? Yes... That's what they used to call me.
Gandalf the Grey. That was my name.
I am Gandalf the White.
And I come back to you now at the turn of the tide.