Can't open Outlook on my PC

[Deleted member 219079]

This has been continued for over a month now. I though it would get fixed over time, but I guess it's client based...

So I've tested it on both IE and Chrome (Iron flavor but doesn't matter).

If it helps, here's what Chrome tells me:

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

 

[chobibo]

I tried searching, found this. Sorry though, if it didn't help.

 

[Dr Super Good]

Sounds like a certificate error of sorts.

 

[Deleted member 219079]

I tried searching, found this. Sorry though, if it didn't help.

Disabling Firewall didn't work

Sounds like a certificate error of sorts.

Whatever that might mean...

 

[Dr Super Good]

Whatever that might mean...

Part of Windows stores a huge list of certificates which are used for encryption and authentication by various applications. If these certificates are invalid then it may throw such an error.

I am guessing that at some stage an update changed one of the certificates, or at least would have but something went wrong. The result is your certificate does not match the certificate ("CIPHER_MISMATCH") at the other side of the SSL socket. This means that it cannot establish an SSL connection so the application errors as no connection could be established.

You either need to fix the SSL certificate which contains the error (usually deleting it will suffice, Windows should fetch the fixed one automatically on restart) or you will need to disable SSL connections (not recommended for security reasons, some secure sites like banks will refuse connections without SSL).

 

[jolly012]

here i found the Fix

http://www.deskdecode.com/err_ssl_version_or_cipher_mismatch/

 

[Deleted member 219079]

I can't open the site.

I don't use Microsoft's services anymore anyway. They don't support multiple accounts like Google, as if we wanted to link all our profiles under a single identity.

 

[pyf]

This has been continued for over a month now. I though it would get fixed over time, but I guess it's client based...

So I've tested it on both IE and Chrome (Iron flavor but doesn't matter).

If it helps, here's what Chrome tells me:

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Out of curiosity, on which OS version did it happen?

 

[Deleted member 219079]

64-bit Windows 7.

 

[pyf]

Although I am an XP user, I would suggest to check a few things.
So here are a few hints, directions and/or solutions, for those interested:


Outlook might miss one or more updates.

Hidden

Since Outlook can be part of the Microsoft Office Suite, one may give the Microsoft Office Configuration Analyzer Tool (= OffCAT) a try:
https://support.microsoft.com/en-us/kb/2625547
https://support.microsoft.com/en-us/kb/2812744

The Root Certificates list might not be up to date.

Hidden

There exist both a trusted list (CTL) and a revoked list (CRL) of certificates

With XP and *XP ONLY*, we simply install the latest rootsupd.exe (CTL) and rvkroots.exe (CRL), and that's about it.
Since Vista and up, I believe the CTL should be automatically updated since a few years ago

I have read there exists an installable automatic updater of untrusted certificates
https://discussions.nessus.org/servlet/JiveServlet/downloadImage/2-27914-3563/PatchingMatrix.PNG.png
- for those online:
https://support.microsoft.com/en-us/kb/2677070
- for those offline:
https://support.microsoft.com/en-us/kb/2813430

There might be something wrong/evil with your CTL

Hidden

Power users may have a look at RCC:
RCC - check your system's trusted root certificate store

CTLInfo (by the same developer) might help too
Sven Faw

These tools will not work with XP

There is a subtle issue regarding the client/server (mis)communication

Hidden

For understanding / troubleshooting HTTPS connection issues with some sites, I go there:
Qualys SSL Labs - Projects


- for a browser check:
Qualys SSL Labs - Projects / SSL Client Test

I point out, using SSLv2 or SSLv3 nowadays may require explicitly modifying an option in the browser. If one can not do this anymore (since SSL tends to be phased out once and for all in web browsers), then one may simply wish to keep an old browser around.

- for checking User Agent capabilities, based on devices/browser/OSes combinations:
Qualys SSL Labs - Projects / User Agent Capabilities

- for a server test
SSL Server Test (Powered by Qualys SSL Labs)


As an example:

Using IE8 on XP, HostsMan is now unable to automatically download the Zeus blocklist from abuse.ch (ZeuS Tracker :: ZeuS blocklist).
And that is why, since it uses XP/IE8 dlls:
SSL Server Test: zeustracker.abuse.ch (Powered by Qualys SSL Labs)

Using XP, we get a handshake_failure, given the server's configuration.

There. Hope it helps someone.


Since it may fix more than meets the eye, I would also suggest having a look here also:
https://support.microsoft.com/en-us/kb/947821

Installation / verification might take 30 minutes or more, and program may seem to be stuck. Just be patient.

 

[Dr Super Good]

Outlook should be integrated into your Office 360 subscription and integrated into all OSes since Windows 7.