Solved Paypal login returns "obsolete cipher suite" error then freezes

Paypal login returns "obsolete cipher suite" error then freezes

I tried to access PAYPAL through my usual URL, https://www.paypal.com/ using Windows 7 Ultimate 64 bit and Chrome 48. on February 15th. after pressing ENTER, I got a Green lock, next to the URL, and a blank screen. I could go no further. Clicking on the lock, a small dropdown appeared, showing 2 cookies from Paypal below a message "Your connection to PAYPAL is private" the connections tab showed that PAYPAL was verified, but my connection was encrypted using an obsolete cipher suite". I could not continue. I had been able to access and use PAYPAL on Feb 9, with no problem. Googled everything I could think of with no fix found. I finally reached a live person at PAYPAL Customer support. Who told me that it was something on their end (he did not elaborate) and suggeested I try IE11. I downloaded and installed IE11, tried to access PAYPAL, and got an error message "Access forbidden error 403". I called PAYPAL again and got the tech support line, who told me my account was locked, then he unlocked it, and I was able to get in. The following day, I tried to access PAYPAL again, and it again returned the "forbidden 403" error. I called PAYPAL again, got a support agent who had no clue what to do, and told me to talk to MY ISP provider.
Can anyone on the Forum shed any light on this?

Hello and welcome madmax mate have you tried disabling the AV while signing on PP as my Kaspersky does form time to time interfere with my login although I must say since starting using Chrome this activity has slowed down a lot.

Personally I would run in safe mode a sfc and chkdsk using the /f and /r switches with the latter.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
&
http://www.sevenforums.com/tutorials/433-disk-check.html > I prefer option 2

Update Chrome? The latest version should not be using insecure cipher suites.

Cipher suites are what governs client handshake over a secure connection so check here:

https://www.howsmyssl.com/

and here:

https://www.ssllabs.com/ssltest/viewMyClient.html#1455820215269&frame_loaded

Check your system clock:

Does your system clock agree with the time shown here?

Accurate Time

If it's too far out it could cause problems.

Also as stated by member ICIT2LOL - on board security suites with SSL scanning built in could cause problems.

Thanks for the quick replies. I ran sfc /checknow - no issues. Ran chkdsk, no issues. Ran anti-malware scan - no problems. I had downloaded the latest Chrome for Win 7 64 bit before I tried to get into Paypal the second time, it's version 48.0.256.116 m. It just updated today. I ran the above sites to check my ssl - all came out OK. system clock is set within 1 minute. My realtime security is Avira, and I disabled realtime protection. I still get the same error - the connection tab shows me using TLS 1.2. Is that something I can change?
By the way, I am currently living in CAMBODIA - though that has never been an issue before. I have lived here for 5 years, and used PAYPAL hundreds of times, as I make custom knives, and buy parts and sell knives using PayPal almost excusively. It did work about 10 days ago - but not any more. When I finally got through to Paypal customer service, the tech told me to try IE, so I downloaded IE11, an installed it - tried to access Paypal again, and got the 403 error - access denied. This seemed to point back at Paypal, so I called back, and then the tech had me try to get in again - he apparently had a way of seeing my attempt, and did something (? - unknown) to unlock or un-block my access, and I was able to get in! I transferred the money out of Paypal to my bank in the USA, and then logged out. the next day, I tried again, and was unable to do the same thing. This time, I got some dingbat rookie who had no clue what was going on, and wanted me to call my ISP to see if they were blocking it. I am going to wait until tonight as they are closed until 8pm here in Cambodia.

I don't actually use Chrome or have it installed but TLS 1.2 should be fine. If you have the latest version it should only use secure cipher suites without any need for configuration. Same goes for IE. So as you still have a problem with more than one browser I'd suspect security software is the issue.

You can mess about enabling or disabling SSL or Protocols/ Cipher Suites in windows but that does not affect browsers as far as I know.

or

you can reset your certificates by following this link.https://www.google.co.uk/url?sa=t&r...186812&usg=AFQjCNECnhzoBOxe5qV4X0A_jSQp5VkEig

Have you used a registry cleaner by any chance?

Roy

Hmm well form your #1 post it seems that PP support is at twos and fours with what info they give out to you and me I would personally get back onot them tell them what you have tried and nothing is working. Now from experience these call centres (which a lot of origin countries use) are usually based somewhere other than where one is and frankly the service at time is pretty ordinary.
So have you tried them agin and if so what was the response this time because I for one have use PP with IE11 and Chrome and never had a problem .

Torchwood - thanks for your reply. Yes, I use a registry cleaner regularly, as part of a weekly maintenance. I checked the website you mentioned, and as I am an end-user, it seems to point back to Paypal once again, as does almost every source I can find.
I checked with my ISP, and they do not block any sites. The government here is not concerned with such things, they have more issues regarding the opposition political parties to worry about. As I was given access one time by Paypal, I think that if I can get a Customer Service tech with some experience, I can have them solve the issue permanently. The time difference makes it hard to get hold of them, during my daytime, they are closed, and only open during my evening hours through early morning hours. I will try again tonight.

Made contact with CS again, and found someone with a brain, who guided me through a lot of things. It came down to my ISP, I thought. She changed my password, and had me try to get in again, and again I got the 403 error. She told me to try to find someone to check my settings, as she could not advise me on that.

Today I also tried something else - I went to a location outside my home, and used the 4G connection - and I WAS able to connect to Paypal. This brings it back to either my ISP, or some setting I have made in error on my desktop. Of course, now that I figured that out, the Customer Service line is closed.
I need some advice on my settings - I think that is where the problem lies. I have tried the default settings, but I don't think that I got all of them correct.
Any ideas?

The only idea that I have at the moment is to try changing your DNS Lookup Provider to something other than your default one that is supplied by your ISP.

If you want to test:

Get a copy of QuickSetDNS - Quickly set DNS servers of your Internet connection on Windows

Extract the files and run the program.

In the window that opens up select your current network adapter using the drop down list. Then select File> New DNS Server then enter the settings for Google DNS like this:


You should end up with something like this:


Then highlight the Google DNS entry and right click then choose "Set active DNS"

Test paypal connection.

If no luck - reboot and test again.

EDIT: Forgot to mention - write down your current settings before you go ahead.

OK, I changed my IP address as above to the Google public, from "Automatic". Then I googled "What is my ip" and it came back with 42.115.47.37 which is in Hanoi!!! Then I tried to get into Paypal again, and again I got the 403 - denied. After 9PM my time (GMT + 7) I will try to contact PP customer support. I have a reset password message from them, but I need a code that I must get from CS. Then, I can reset my password, and get to PP on my smartphone. That will at least give me some time to figure out (with some help) what is going on.

Avira

Hi Madmax,
The only other thing i can think of is Avira,
Do you use thier Firewall
Or there Safesite toolbar extention
They might be blocking it.

Roy

I tried to change my DNS using the downloaded program you mentioned. It was originally "Automatic" and I changed it to the Google DSN 8.8.8.8.8.4.4. I then exited the program. and restarted. I then opened IE11, and went to a "what is my ip address" site, and it told me that my IP address was 42.115.47.37 - which is in HANOI!!! I then tried to access Paypal again, and got the same 403 error. I am totally confused.
I did access paypal again using 4G, and not my network provider. After getting an access id from Paypal, I was able to change my password, enter new security questions/answers. and log into my account. At least now I can transact some business, while I try to figure out what's wrong with my desktop.

I agree that security software is likely to be the issue.

RE: Paypal.

Look at the info here:

https://www.ssllabs.com/ssltest/analyze.html?d=paypal.com&s=23.45.85.150

TLS 1.2 is fine.

From my machine:

Paypal wants to allow flash. Do you have any flash blocker?



Using another browser than the one used for the above screenshot:


Check that none of these domains are blocked in your HOSTS file or by anything else:


Chrome "should" take care of insecure cipher suites. I don't use Chrome but for me RC4 suites are disabled.



If I monitor a connection attempt to Paypal I get the following:


I wonder if it is worth resetting your router?

Now just as a long shot how about trying a system restore back to when the PP was working well?

My other thought was to run these just in case - I can't see where any scan has been done so if you have just ignore
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Malwarebytes | Malwarebytes Anti-Malware Premium
AdwCleaner Download
ADW download from bleeping computer delete any rubbish found with the malware scans

I just went through my system with just about every anti-virus and anti-malware that I have, and tried to get into Paypal again. This time, it worked, I did change my IP to the Google 8.8.8.8.8 address, which seems to be what Paypal likes!
Thanks to all those who answered my cry for help! Good Karma to you all.

Yes mate PP works in mysterious ways like a lot of other things. Plus I suppose like a lot of companies like PP the servers must be flat out 24/7 and though annoying these things happen.

But at least you are back on eh?

At the moment, I CAN get into Paypal but only through Internet explorer - not Chrome. I also CANNOT get there through a link, when someone sends me an email invoice. I still think there is a setting wrong somewhere on my system.

madmax888 said:

At the moment, I CAN get into Paypal but only through Internet explorer - not Chrome. I also CANNOT get there through a link, when someone sends me an email invoice. I still think there is a setting wrong somewhere on my system.

Click to expand...

I think that there's nothing you can do. It's up to Paypal to fix the isssues it has with Chrome users.



This article attempts to explain the problem but it's beyond my understanding:

https://certsimple.com/blog/chrome-outdated-cryptography

Basically it would appear that the server operator (Paypal) must fix the problem.

I note that paypal does indeed get an A+ rating here:

https://www.ssllabs.com/ssltest/analyze.html?d=https://www.paypal.com

I downloaded SRWare Iron Portable (very similar to Chrome) and get the same problem as you. Other browsers have no issues with Paypal.


So there's nothing you can do to fix Chrome/ Paypal issues.

As for links not working - copy the link and paste into another browser to open it.

I CAN get into Paypal but only through Internet explorer - not Chrome

Click to expand...

Having said what I have I have to admit that I never had issues with PP in IE but do get the occasional "lockout" in Chrome. I put this down to mostly my broadband but thinking about it now maybe Chrome has got something about it that conflicts with PP. One thing I am not so sure about with Chrome is the way that it remembers login details for example and maybe therein lies the problem.
I suppose it is not out of the bounds of reality that Chrome servers get it wrong.