Websites that don't support TLS version 1.2 or higher will display a Secure Connection Failed error page with Error code: SSL_ERROR_UNSUPPORTED_VERSION or ERR_SSL_VERSION_OR_CIPHER_MISMATCH and a message that says, This website might not support the TLS 1.2 protocol, which is the minimum version supported by latest browsers. By Default TLS1.2 will be enabled on JunosSpace. 

This article provides a workaround for correcting the error condition.

• Unable to log in to Junos Space WebUI with below error. 

An error occurred when connecting to ##<Space WebUI>##. Peer using an unsupported version of security protocol.

Error code: SSL_ERROR_UNSUPPORTED_VERSION

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

•  After restoring the Junos Space database backup, the TLS version may changed 

The following procedure will help to resolve SSL_ERROR_UNSUPPORTED_VERSION or ERR_SSL_VERSION_OR_CIPHER_MISMATCH issue.

Step 1: Need to verify which TLS version is enabled under webProxy.conf file on JunosSpace. We can verify this with the below command :

[root@space-005056a9771e ~]# cat /etc/httpd/conf.d/webProxy.conf | grep -i TLSv -A1

SSLProtocol -ALL +TLSv1

SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM

--

#SSLProtocol -ALL +TLSv1.2

#SSLCipherSuite TLSv1.2:!aNULL:!eNULL:!MD5:!RC4:!SHA1:!EXPORT:!RSA:!DSS:!kECDH

Step 2 : To enable the TLS1.2 version, we need to enable TLSv1.2 back by modifying webProxy.conf config file: 
Edit the file using vi command and remove the '#' as seen below:

[root@space-005056a9771e ~]# cat /etc/httpd/conf.d/webProxy.conf | grep -i TLSv -A1
#SSLProtocol -ALL +TLSv1
#SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM
--

# Note: When weak algorithms are disabled on your webBroswer then use below cipher suite under webProxy 
SSLProtocol -ALL +TLSv1.2
SSLCipherSuite TLSv1.2:!aNULL:!eNULL:!MD5:!RC4:!SHA1:!EXPORT:!RSA:!DSS:!kECDH

Step 3: After modifying the webProxy.conf file need to reload httpd service. 

[root@space-005056a9771e ~]# service httpd reload

Step 4: Now we should be able to login on JunosSpace UI. 

Note : If you face any issues, please contact JUNIPER JTAC Support for assistance.

2024-02-04: Article published, Verified in JTAC lab
2024-04-10: - Made few user visible edits and publishing it externally

2024-10-07:Minor edits and added an error message.