I have noticed that eight-cubed.com is not working since few days. I find the site very useful and I hope it gets up and running again.
Thanks
Peter

On 2023-06-30, Peter Skoog <ptrskg@gmail.com> wrote:
> I have noticed that eight-cubed.com is not working since few days. I find the site very useful and I hope it gets up and running again.
> Thanks
> Peter

I can connect to the site, but current Firefox ESR stops the connection
due to SSL_ERROR_NO_CYPHER_OVERLAP. I wonder if the site is using obsolete
encryption algorithms that Firefox is now rejecting outright.

Are you really unable to connect or are you getting SSL errors once
connected ?

I also see an attempt to connect using http:// is redirected to https://
after which the same SSL error occurs.

Simon.

--
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.

On 2023-06-30, Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
> On 2023-06-30, Peter Skoog <ptrskg@gmail.com> wrote:
>> I have noticed that eight-cubed.com is not working since few days. I find the site very useful and I hope it gets up and running again.
>> Thanks
>> Peter
>
> I can connect to the site, but current Firefox ESR stops the connection
> due to SSL_ERROR_NO_CYPHER_OVERLAP. I wonder if the site is using obsolete
> encryption algorithms that Firefox is now rejecting outright.
>
> Are you really unable to connect or are you getting SSL errors once
> connected ?
>
> I also see an attempt to connect using http:// is redirected to https://
> after which the same SSL error occurs.
>

UPDATE: I can connect to the site once I drop the www. prefix on the
URLs that Google search offers me. Unfortunately, the couple of URLs
I tried on the site once I connected also have the www. prefix so it's
going to be slow going for you to navigate the site. :-)

Simon.

--
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.

On 6/30/23 1:02 AM, Peter Skoog wrote:
> I have noticed that eight-cubed.com is not working since few days. I
> find the site very useful and I hope it gets up and running again.

http gets redirected to https, but whatever web server is running there
cannot do a TLS handshake (or simply doesn't have a certificate):

$ openssl s_client -connect www.eight-cubed.com:443
CONNECTED(00000006)
140704586831424:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert
handshake failure:ssl/record/rec_layer_s3.c:1399:SSL alert number 40
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 176 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1688127677
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---

Simon Clubley wrote:

> On 2023-06-30, Peter Skoog <ptrskg@gmail.com> wrote:
>> I have noticed that eight-cubed.com is not working since few days. I find the site very useful and I hope it gets up and running again.
>> Thanks
>> Peter
>
> I can connect to the site, but current Firefox ESR stops the connection
> due to SSL_ERROR_NO_CYPHER_OVERLAP. I wonder if the site is using obsolete
> encryption algorithms that Firefox is now rejecting outright.
>
> Are you really unable to connect or are you getting SSL errors once
> connected ?

worksforme[TM] the site's crypto setup looks ok,
only TLS 1.2 and 1.3, reasonable (smallish) list of ciphers.

<https://www.ssllabs.com/ssltest/analyze.html?d=eight-cubed.com>

On Friday, June 30, 2023 at 8:25:48 AM UTC-4, Craig A. Berry wrote:
> On 6/30/23 1:02 AM, Peter Skoog wrote:

Testing a little further: notice that the canonical name (CN) used by this site is "www.ftp.eight-cubed.com" (could the "ftp" be some sort of typo?)
Anyway, most sites today only contain two URLs (eg. host.domain and www.host.domain)
If you intend to support more left-side variants then they need to be on the certificate as well or you must use a wildcard.
openssl s_client -connect eight-cubed.com:443 -showcerts
CONNECTED(000001BC)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = www.ftp.eight-cubed.com
verify return:1
---
Certificate chain
0 s:CN = www.ftp.eight-cubed.com
i:C = US, O = Let's Encrypt, CN = R3
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
v:NotBefore: May 21 12:47:27 2023 GMT; NotAfter: Aug 19 12:47:26 2023 GMT
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA0ce6yoh0e9tgEcCDPdQp00iMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
bla...bla..bla...

(2) this command does not appear to handshake properly:
openssl s_client -connect eight-cubed.com:443 -tls1_3
(the transaction dangles when tested from: OpenSSL 3.1.0 14 Mar 2023)

(3) this command does connect properly:
openssl s_client -connect eight-cubed.com:443 -tls1_2
but then typing:
GET / HTTP/1.0<enter>
<enter>
returns a 320 error so I think we're are seeing a misconfigured site.

Neil Rieck
Waterloo, Ontario, Canada.
http://neilrieck.net
http://neilrieck.net/OpenVMS.html