This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Thunderbird 45.0 stops connecting to my email server claiming no common encryption ciphers

  • 1 reply
  • 2 have this problem
  • 4 views
  • Last reply by Matt

mikesz
mikesz
more options

Attempt to send or receive emails shows no common ciphers in the error console. The list of ciphers available on the server are as follows:

Protocols: TLSv1.0, TLSv1.1 and TLS1.2

Ciphers available: AES256-SHA256: AES128-SHA256 : ECDHE-ECDSA-AES128-GCM-SHA256 : ECDHE-RSA-AES128-SHA256 : AES128-GCM-SHA256 : AES256-GCM-SHA384 : DHE-RSA-AES256-SHA256

Seems like a pretty wide variety (aes256-sha256 should be universal, I'd think)

Attempt to send or receive emails shows no common ciphers in the error console. The list of ciphers available on the server are as follows: Protocols: TLSv1.0, TLSv1.1 and TLS1.2 Ciphers available: AES256-SHA256: AES128-SHA256 : ECDHE-ECDSA-AES128-GCM-SHA256 : ECDHE-RSA-AES128-SHA256 : AES128-GCM-SHA256 : AES256-GCM-SHA384 : DHE-RSA-AES256-SHA256 Seems like a pretty wide variety (aes256-sha256 should be universal, I'd think)

All Replies (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

cypher lengths have increased. try 2048 bit

I also suggest you put your server in here https://www.ssllabs.com/ssltest/ perhaps they have some suggestions.

Have you updated the server for logjam? http://thunderbirdtweaks.blogspot.com.au/2015/07/logjam-and-thunderbird.html

I suggest you have a look here https://wiki.mozilla.org/Security/Server_Side_TLS those are the server side setting Mozilla recommend for a range of things TLS