NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ERR_SSL_VERSION_OR_CIPHER_MISMATCH after Chrome update
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Can no longer acess any of my 5 drives (5 x RND2110v2 units) admin pages through any browser, I managed to get on briefly before my one machine upgraded Chrome to the latest version, I quickly checked my Chrome version and saw it was at 21% on the chrome update then when I wen't back 10 seconds later in it was a no go, no access from that machine either now.
So does this mean I'm now going to have to throw all of my NAS drives away?
Help would be much appreciated
Many thanks
Ian
8 Replies
Ianspeed wrote:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Can no longer acess any of my 5 drives (5 x RND2110v2 units) admin pages through any browser, I managed to get on briefly before my one machine upgraded Chrome to the latest version, I quickly checked my Chrome version and saw it was at 21% on the chrome update then when I wen't back 10 seconds later in it was a no go, no access from that machine either now.
I've confirmed this fails with Chrome 98 (though it does work with Chrome 97). Also, it fails with Edge. I'm not seeing any workaround with those two browsers.
If IE is still installed on your PC, then that will still work (at least for now).
You can also install FireFox 94.0.2 (or older) - that also works. But you do need make sure you turn off automatic updates. Then only use FF to reach the NAS (or other websites on your home network), as it will not have up to date security patches.
Thanks Stephen,
I guess there is absolutely no hope of a patch for these units? I have downloaded Chromium as an interim due to the fact that I use up to date browers Chrome and FF at the same time for checking customers work, so the older version of FF would become an issue sooner or later.
Thanks
Ian
Ianspeed wrote:I guess there is absolutely no hope of a patch for these units?
WhoCares_ might be able to create a patch. He runs rnxtras.com. If he doesn't chime in here, try emailing info@rnxtras.com.
There are two potential paths - one is to update the ssl library on the legacyNAS (and make sure apache is set up to use it properly). That could be quite difficult.
The other is to reconfigure apache so that doesn't advertise/redirect to https. Then http://nas/admin should work, and https would be completely disabled. That would likely be easier.
FWIW, someone did manage to implement the second option on their 5.3.x system: https://community.netgear.com/t5/Using-your-ReadyNAS-in-Business/ReadyNAS-NV-V2-TLS-Support-may-not-be-able-to-access-soon/td-p/1873534 His edits look like they'd also apply to 4.1.x firmware (other than the SSLProxyEngine bit in httpd.conf). But I've never tried them.
I can't do anything with 4.2.x firmware, because I no longer have any ReadyNAS running that firmware.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
