Error performing TLS handshake: One of the involved algorithms has insufficient security level.
- Problem: When trying to add a Microsoft Exchange account and clicking on Wizard/Account Editor > Receiving Email > Fetch URL, the prompt returns a white page with the message
Error performing TLS handshake: One of the involved algorithms has insufficient security level.
This has been consistently happening to Fedora users since Fedora 34 came out
- Expected result: my organisation's sign in page followed by Microsoft prompting me to authorize the app
- Actual result: blank page with writing as in point 1
OS: Fedora 35 (many Fedora 35/34 users have reported the same problem over and over with no solution, not even setting update-crypto-policies --set DEFAULT:FEDORA32
works, also looks more like a stopgap than a solution if it manages to work for some other user)
Evolution version: evolution-3.42.4-1.fc35.x86_64
, evolution-ews-3.42.4-1.fc35.x86_64
Output of update-crypto-policies:
> update-crypto-policies --show
DEFAULT
Important note: I actually managed to screenshot (fastest stamp key in the west) and manually copy the URL that was used for the request before it printed the blank page and tried to paste it in my browser and voilà, it brought me right to the Microsoft thingy that asks if you want to authorize GNOME Evolution or something (I was already logged in to my organisation in the browser), authorized and got back an URL with a code
- What I put in my browser:
https://login.microsoftonline.com/common/oauth2/authorize?response_mode=query&resource=https://outlook.office365.com&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient&client_id=<client id>&login_hint=<my email>&response_type=code&prompt=login
- What I got back:
https://login.microsoftonline.com/common/oauth2/nativeclient?code=<some long ass code>&session_state=<what looked like a guid or something>
I would even accept to open the URL directly in my browser when clicking Fetch URL and copypaste the response into a form inside Evolution like CLI software do (rclone does this, for instance)