Legal Hold Confirmation page fails to open with Chrome and Firefox 'ERR_SSL_VERSION_OR_CIPHER_MISMATCH'

book

Article ID: 100032977

calendar_today

Updated On:

Description

Error Message

ERR_SSL_VERSION_OR_CIPHER_MISMATCH 

User-added image

Cause

For installations with the Legal Hold Module where users will be using Chrome or Firefox to access the Legal Hold Confirmation page, a DSA system certificate will not work. Chrome and Firefox browsers are only compatible with a 2048-bit keysize. If you need to request a provider generated certificate or generate your own, 2048-bit encryption is required. 

For installations with the Legal Hold Module where users will be using only Internet Explorer to access the Confirmation Server page, you can continue using DSA 1024-bit certificates or use RSA 2048-bit certificates. Internet Explorer is compatible with both.

 

Resolution

Replace the standard DSA self-signed certificate with an RSA self-signed certificate. 

Steps to install the RSA self-signed certificate:

1. Stop the eDiscovery Platform(eDP) services

2. Open Clearwell Commander > Action > Generate Self-signed Certificate (See Figure 1)

Figure 1
User-added image

Note: If the eDP services are running a warning pop-up window will appear Stating the services must be stopped in order to replace the certificate. 
(Go back to Step 1 and begin again)


3. Change the Algorithm to RSA (See Figure 2)

Figure 2
User-added image



4. Start the eDiscovery Platform services

 

Issue/Introduction

Legal Hold Confirmation page fails to open when using Chrome or Firefox. 'ERR_SSL_VERSION_OR_CIPHER_MISMATCH'

Additional Information

JIRA: ESA-44487 JIRA: ESA-44332