MozillaZine

SSL is disabled

From MozillaZine Knowledge Base

SSL (Secure Sockets Layer) is a security protocol that secures communication over the Internet. Most banking sites and online stores require sensitive information be sent over SSL. This article deals with an "SSL protocol has been disabled" error. For information on other messages received when accessing secure sites, see Error loading secure sites.

Contents

Error messages

If SSL is disabled, you will see a dialog box or error page, with a message similar to the following:

  • (Firefox 2) Firefox can't connect securely to www.example.com because the SSL protocol has been disabled.
  • (SeaMonkey 1.x) SeaMonkey can't connect securely to www.example.com because the SSL protocol has been disabled.
Image:Secure_site_error.png
  • (Firefox 3 and SeaMonkey 2) Secure Connection Failed. An error occurred during a connection to www.example.com.
    Can't connect securely because the SSL protocol has been disabled.
Image:SSLdisabled.png

Note: you can't make a permanent exception in Firefox 3.5 or newer if Firefox is in Private Browsing mode.

If you see one of these errors, try the following solutions:

Check SSL settings

Check that SSL is enabled.

  • Firefox 2 and above: "Tools -> Options -> Advanced -> Encryption": "Use SSL 3.0" and "Use TLS 1.0" should both be checked.
  • SeaMonkey: "Edit -> Preferences -> Privacy & Security -> SSL": "Enable SSL 3.0" and "Enable TLS 1.0" should both be checked.

Notes:

  1. TLS 1.0 is an upgrade to SSL 3.0 with a new name (TLS 1.0 = SSL 3.1).
  2. In certain circumstances (e.g., government installations), SSL 3.0 has to be kept disabled. See Locking preferences how to accomplish that by forcing security.enable_ssl3 to false for the entire installation.

Check proxy settings

If you're using a manual proxy, make sure "Use this proxy for all protocols" and "SSL proxy" in "Tools -> Options -> Advanced -> Network / Connection -> Settings" (Firefox 2 and above) or "Edit -> Preferences -> Advanced -> Proxies" (Mozilla Suite/SeaMonkey) are set to the correct values.

Check firewall

Mozilla applications require a loopback connection to be available for SSL. Check your firewall settings to make sure you have not blocked incoming connections to Mozilla applications. See the Firewalls article for details on firewall configuration.

Check date and time

If you get an error about an expired certificate that should be valid according to the date or a certificate that will be valid in the future then check the date and time on your computer to make sure that both are correct.

Clear cache

You may simply have an out of date version of the page in your cache. Try clearing the cache.

SSL diagnostics

You can try this SSL test. If your browser passes, it's likely a problem with the site you're trying to connect to.

SSL disabled on Windows 9x systems after upgrade

If you're on Windows 98 or ME and SSL no longer works after updating to Firefox 2.0.0.2 or later, Firefox 1.5.0.10 or later 1.5 builds, and Thunderbird 1.5.0.10 and later 1.5 builds, you may be able to fix it by installing IE 6.0 SP1.[1][2]

SSL support

If, rather that downloading the program from Mozilla, you compiled the Mozilla application yourself or received it from an administrator, it's possible SSL support was disabled.

Other solutions

See also