How to Enable SSL v3?

[jagooch]

I'm in the same boat. Part of my job is to migrate services from really old ( and I mean really old ) network appliances to new, cutting-edge ones. However, until the migration is done in about 6-7 months, I need to be able to admin the old systems that use the old and broken security protocols. They systems are buried behind several firewalls and even if you are behind the firewall is tough going to get to the system.

While I appreciate the security options for Joe User, Firefox developers should understand that there are way too many use cases out there to presume that a one-size-fits-all solution exists. I do like the idea of having warnings and having the user manually create and exception rule for know vulnerabilities.

FInally, I highly recommend reading the book "The Phoenix Project" where the security manager has a fit about system level security vulnerabilities and is shut down by the fact the those vulnerabilities are mitigated by the network security and other processes.

[therube]

During your migration, use an older version of FF that are not so encumbered.

[rsx11m]

Unless they port that patch to the 38.0 ESR branch, it would be the fallback solution for anybody still needing SSL 3.0 for whatever reason (at least as long as that extended-support branch lasts).

Look at https://www.mozilla.org/firefox/organizations/, which still doesn't have the patch removing SSLv3 included. The current 38.5.2 release should have all otherwise applicable security fixes, but end of the line is presumably 38.8.x in 3 months or so.

[James]

You could use the portable Firefox 38.5.2 ESR for this one thing and Firefox 43.0.4 Release for everything else.
http://portableapps.com/apps/internet/f ... rtable-esr

[dsc3507]

I put a Buffalo N600 DD-WRT router in https mode with http turned off and got locked out with no ssh control. I tried everything I could think of including the above methods. It appears that SSLv3 has been removed from current browsers. Finally I downloaded an old copy of firefox - I choose V20.0 for windows US - see this site for old versions for windows listed by OS and country -

https://ftp.mozilla.org/pub/firefox/releases/

After loading it accepted my https request, allowed me to make an exception, and worked which allowed me to turn http back on and https off in the router and recover my mistake without resetting the router.

So I think the answer here is that SSL V3 has been removed from recent browsers. So don't aggravate yourself and try to make something that won't go work. Just get an old browser!

Another lesson, although probably too late for someone reading this, is never turn off http until you have checked that https works on your router or any other devices!

[James]

As said in thread, Mozilla depreciated SSLv3 completely starting 39.0 as the portable version of Firefox 38 ESR (now old) was a way to have have SSLv3 if you enabled it and the portable version does not touch normal Firefox install and settings.

Hopefully you used a separate Profile with the old Firefox 20.0 and not shared it with Firefox 47.0. Also there was no need to go that far back.

Anyways this thread is pretty old now as we normally lock bumped threads if a year or more older.

[dsc3507]

I nomally use waterfox not firefox so I don't much care what version of firefox is installed in Windows.

[James]

I nomally use waterfox not firefox so I don't much care what version of firefox is installed in Windows.

What you are using is basically a third-party build of Firefox 47.0 as one take source and build Firefox but cannot call it Firefox if making it available to others. If you are using Waterfox simply for to have a Win64 build of Firefox then there is no need as there has been Win64 Firefox for Releases since 42.0 and current Win64 Release can be downloaded at http://www.mozilla.org/firefox/all/