bad result in howsmyssl [Solved]

[molens]

When I test Ice Dragon with the site howsmyssl.com I got as result:
Your SSL client is Bad. The reasons are the TLS client is vbad and very old. Furthermore I got this:Insecure Cipher Suites

Bad Your client supports cipher suites that are known to be insecure:

SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA: This cipher was meant to die with SSL 3.0 and is of unknown safety.

What means all this? What is the solution?
Mod edit: Added solved to the topic title, Captainsticks.

[captainsticks]

Hi and welcome molens,
After changing the following setting IceDragon will then pass this test.

1. Type about:config into the address bar and enter.
2. Click the ‘I’ll be careful, I promise’ button.
3. Type security.ssl3.rsa_fips_des_ede3_sha into the search bar.
4. Double click the preference name that appears and change the setting from true to false, then OK.

Hope that helps.

[molens]

A part of your solution works, but I got this message:
Your client is using TLS 1.0, which is very old, possibly susceptible to the BEAST attack, and doesn’t have the best cipher suites available on it. Additions like AES-GCM, and SHA256 to replace MD5-SHA-1 are unavailable to a TLS 1.0 client as well as many more modern cipher suites.
What can I do?

[captainsticks]

Hi molens,
Please see the addition information in the quote below, sorry I forgot to mention that previously.

Kind regards.

@captainsticks post:1

POODLE Attack-Wikepedia

Comodo IceDragon.

1. Type about:config into the address bar and enter.
2. Click the ‘I’ll be careful, I promise’ button.
3. Type security.tls.version.min into the search bar.
4. Double click the preference name that appears and change the setting from 0 to 1, then OK to enforce TLS.

Also change the value of security.tls.version.max from 1 to 3, which enables TLS 1.1 and 1.2.

You can now test your new browser settings in the links below.
https://zmap.io/sslv3/
https://www.ssllabs.com/ssltest/viewMyClient.html

Thanks given to ‘JoWa’ for his helpful contributions with this topic.

Kind regards.

[molens]

Thank you Global Moderator for your accurate answer. Everything works well!!!

[captainsticks]

You are welcome, glad to hear that it worked correctly. :-TU

[JoWa]

@molens post:3

Additions like AES-GCM, and SHA256 to replace MD5-SHA-1 are unavailable to a TLS 1.0 client as well as many more modern cipher suites.

The current version of IceDragon (= Firefox 26) does not support AES-GCM. Support was added in Firefox 27.