{"action":"created","issue":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/5628","repository_url":"https://api.github.com/repos/EFForg/https-everywhere","labels_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/5628/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/5628/comments","events_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/5628/events","html_url":"https://github.com/EFForg/https-everywhere/issues/5628","id":165114971,"number":5628,"title":"Error running fetch-test.sh: \"Unknown cipher in list\"","user":{"login":"jeremyn","id":299895,"avatar_url":"https://avatars.githubusercontent.com/u/299895?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremyn","html_url":"https://github.com/jeremyn","followers_url":"https://api.github.com/users/jeremyn/followers","following_url":"https://api.github.com/users/jeremyn/following{/other_user}","gists_url":"https://api.github.com/users/jeremyn/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremyn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremyn/subscriptions","organizations_url":"https://api.github.com/users/jeremyn/orgs","repos_url":"https://api.github.com/users/jeremyn/repos","events_url":"https://api.github.com/users/jeremyn/events{/privacy}","received_events_url":"https://api.github.com/users/jeremyn/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/EFForg/https-everywhere/labels/Ruleset%20Testing","name":"Ruleset Testing","color":"207de5"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-07-12T15:52:52Z","updated_at":"2016-07-28T23:04:19Z","closed_at":null,"body":"I'm getting `Fetch error` messages such as you see below when I run `fetch-test.sh` against any ruleset I've tried so far. The example I've given below is run with commit 45083c6da8daeac07e30c154974566d770446b32. This is using Vagrant with a Windows 10 host/Fedora 24 Cloud guest (see https://github.com/EFForg/https-everywhere/pull/5584). `bash test.sh` seems to finish without error.\r\n\r\nWhat's causing this error and how can I fix it? Thanks.\r\n\r\n```bash\r\n[vagrant@localhost vagrant]$ ./fetch-test.sh src/chrome/content/rules/Amnesty_USA.org.xml\r\nINFO Finished comparing http://amnestyusa.org/ -> https://amnestyusa.org/. Rulefile: src/chrome/content/rules/Amnesty_USA.org.xml.\r\nINFO Finished comparing http://www.amnestyusa.org/ -> https://www.amnestyusa.org/. Rulefile: src/chrome/content/rules/Amnesty_USA.org.xml.\r\nERROR src/chrome/content/rules/Amnesty_USA.org.xml: Fetch error: http://amnestyusa.org/ => https://amnestyusa.org/: (59, 'Unknown cipher in list: RC4-MD5:RC4-SHA:DES-CBC3-SHA:AES128-SHA:AES256-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-S')\r\nERROR src/chrome/content/rules/Amnesty_USA.org.xml: Fetch error: http://www.amnestyusa.org/ => https://www.amnestyusa.org/: (59, 'Unknown cipher in list: RC4-MD5:RC4-SHA:DES-CBC3-SHA:AES128-SHA:AES256-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-S')\r\nINFO Finished in 0.29 seconds. Loaded rulesets: 1, URL pairs: 2.\r\n[vagrant@localhost vagrant]$\r\n```"},"comment":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/comments/236050924","html_url":"https://github.com/EFForg/https-everywhere/issues/5628#issuecomment-236050924","issue_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/5628","id":236050924,"user":{"login":"jeremyn","id":299895,"avatar_url":"https://avatars.githubusercontent.com/u/299895?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremyn","html_url":"https://github.com/jeremyn","followers_url":"https://api.github.com/users/jeremyn/followers","following_url":"https://api.github.com/users/jeremyn/following{/other_user}","gists_url":"https://api.github.com/users/jeremyn/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremyn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremyn/subscriptions","organizations_url":"https://api.github.com/users/jeremyn/orgs","repos_url":"https://api.github.com/users/jeremyn/repos","events_url":"https://api.github.com/users/jeremyn/events{/privacy}","received_events_url":"https://api.github.com/users/jeremyn/received_events","type":"User","site_admin":false},"created_at":"2016-07-28T23:04:19Z","updated_at":"2016-07-28T23:04:19Z","body":"Also, for what it's worth, this seems to be a maximal cipherList based on the mod_nss documentation [linked above](https://git.fedorahosted.org/cgit/mod_nss.git/plain/docs/mod_nss.html#Directives), pulled from the table under `NSSCipherSuite` and removing some ciphers that were not recognized on Fedora 24:\r\n\r\n```\r\ncipherList = rsa_3des_sha,rsa_des_sha,rsa_null_md5,rsa_null_sha,rsa_rc2_40_md5,rsa_rc4_128_md5,rsa_rc4_128_sha,rsa_rc4_40_md5,fips_des_sha,fips_3des_sha,rsa_des_56_sha,rsa_rc4_56_sha,rsa_aes_128_sha,rsa_aes_256_sha,rsa_aes_128_gcm_sha_256,dhe_rsa_aes_128_gcm_sha_256,ecdh_ecdsa_null_sha,ecdh_ecdsa_rc4_128_sha,ecdh_ecdsa_3des_sha,ecdh_ecdsa_aes_128_sha,ecdh_ecdsa_aes_256_sha,ecdhe_ecdsa_null_sha,ecdhe_ecdsa_rc4_128_sha,ecdhe_ecdsa_3des_sha,ecdhe_ecdsa_aes_128_sha,ecdhe_ecdsa_aes_256_sha,ecdh_rsa_null_sha,ecdh_rsa_128_sha,ecdh_rsa_3des_sha,ecdh_rsa_aes_128_sha,ecdh_rsa_aes_256_sha,echde_rsa_null,ecdhe_rsa_rc4_128_sha,ecdhe_rsa_3des_sha,ecdhe_rsa_aes_128_sha,ecdhe_rsa_aes_256_sha,ecdhe_ecdsa_aes_128_gcm_sha_256,ecdhe_rsa_aes_128_gcm_sha_256\r\n```"}}
{"actor":{"display_login":"jeremyn"}}