FireFox and home server

Jun 13, 2023 Last reply: 3 years ago 13 Replies
W

Does anyone have a "fix" for creating an I.P. address or site/url exemption for firefox (and Brave etc) with regards to bypassing the "not secure, you are NOT going there" browser message



Error code: SSL_ERROR_NO_CYPHER_OVERLAP



I have a Hewlet Packard DL360 G7 server hosting a development site but now I can't get into the ILO 3 server resource monitor software because FF and Brave refuse to connect to the old TLS encryption protocol and they have now removed the option to add an exception.

formatting link
my work PC I can still log into the system (via site-to-site VPN) even though it's FireFox 113.* presumably because I'd already added an exception for the IP address on an earlier version.



ILO 3 runs on its own dedicated/isolated network port and O.S. (dedicated "system" web server) which can't be updated other than BIOS and the server is way past any new updates and the port can only be accessed from the L.A.N.



Wondering if anyone has a workaround or whether there's another browser that isn't so tetchy about connecting to old systems?



This is a side DIY to the current balcony fibreglassing job I'm in the middle of doing. :)



Cheers - Pete


Vote
Twitter Facebook LinkedIn
A

certs are not related to the SSL/TLS version used.

ILO3 is quite old, but it can generate a CSR

Vote
Twitter Facebook LinkedIn
O

Am 14/06/2023 um 12:01 schrieb Theo:

What OS in on the server?

Vote
Twitter Facebook LinkedIn
A

He said, its the ILO (out of band management) on a HP/compaq server ...

Vote
Twitter Facebook LinkedIn
O

Am 14/06/2023 um 15:55 schrieb Theo:

Can you ssh into it? A command line?

Can you not use an old PC or a second hand Raspberry PI to use as a home/print server?

Vote
Twitter Facebook LinkedIn
T

ILO is the baseboard management interface (BMC) for an HP rack server, and lives on its motherboard. It allows you to power up/down the unit, manage power/fan speeds, change BIOS settings, remote access to the VGA, connect virtual DVD drives. Effectively it replaces any need to connect a monitor and keyboard to the unit, which may be on the other side of the world.

There may be a command line interface, but it doesn't allow you to do things like remote VGA.

There is no replacement for that if you want to achieve those management functions, because only the ILO chip is hooked into the server in that way. The trouble is that the server may be 10+ years old and still useful, but the ILO firmware is out of support (or maybe only getting security updates).

For machines without BMC remote management (ILO/iDRAC/etc) I use

formatting link
as an IP-KVM which gives you remote HDMI / keyboard / mouse / media / power butotns, but it doesn't give access to some features like internal hardware status. And you need a Pi plus an HDMI capture board (which start at about £30, or a purpose built board is £140).

A Raspberry Pi is not the same as a big-iron Xeon server with dozens of x86 cores and hundreds of GB of RAM, which is what these often are.

(such servers can be had quite cheaply in some cases, if the power bill for running them 24/7 exceeds the cost of buying a newer server, and if you only run them sporadically that's not a problem for you. But you have to deal with stuff like the ILO being out of date)

Theo

Vote
Twitter Facebook LinkedIn
A

You can get into ILO config by pressing F9 (or maybe F8) at boot time, there you can change the network/user settings for it, and I think generate CSR or load certs ... but ILO3 is ancient

You may be able to run the ILO Configuration Utility from within a supported O/S, but the oldest i can see is for ILO4

See pages 48/49 of this

formatting link

Vote
Twitter Facebook LinkedIn
W

No it doesn't John but in going back in to check I found something I'd changed in FF about:config has now taken effect and I'm once again able to access the interface from the home P.C. possibly until the next browser update or locking down I guess.

Cheers Pete

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required