SSL certificate

More
20 Oct 2016 14:24 #261985 by Manu
SSL certificate was created by Manu
I've been getting a message at work each time I try to access ToTJO, that the SSL certificate is too low, so now I can only access this site from my mobile phone.

Is this a server side issue, or is my company run by Sith Lords trying to stop me from becoming a Jedi? :lol:
The pessimist complains about the wind;
The optimist expects it to change;
The realist adjusts the sails.
- William Arthur Ward

Please Log in to join the conversation.

More
20 Oct 2016 14:38 #261990 by Carlos.Martinez3
Replied by Carlos.Martinez3 on topic SSL certificate
I need a cert for my blackberry too
Pastor of Temple of the Jedi Order
pastor@templeofthejediorder.org
Build, not tear down.
Nosce te ipsum / Cerca trova

Please Log in to join the conversation.

  • ren
  • Offline
  • Member
  • Member
  • Council Member
  • Council Member
  • Not anywhere near the back of the bus
More
20 Oct 2016 15:11 #262000 by ren
Replied by ren on topic SSL certificate
too low?!

Can you specify what the errors are, and what OS versions/browser you are using? The ssl setup is fairly high end.
Convictions are more dangerous foes of truth than lies.

Please Log in to join the conversation.

More
20 Oct 2016 15:15 #262002 by Manu
Replied by Manu on topic SSL certificate

ren wrote: too low?!

Can you specify what the errors are, and what OS versions/browser you are using? The ssl setup is fairly high end.


I'm not at work yet. As soon as I get there this afternoon I'll post the details here.

I get the same error in both IE 10 and Chrome. My PC runs Windows 10
The pessimist complains about the wind;
The optimist expects it to change;
The realist adjusts the sails.
- William Arthur Ward

Please Log in to join the conversation.

  • Visitor
  • Visitor
20 Oct 2016 15:27 #262004 by
Replied by on topic SSL certificate
Not trying to overstep here, but Chrome 53.0.2785.143 m on Enterprise 7 SP1 is telling me that is the

The certificate for this site expires in 2017 or later, and the certificate chain contains a certificate signed using SHA-1.

I am assuming that SHA-1 is the deal breaker here. MS, Google, and Mozilla all are starting to want 2 or 3.

Please Log in to join the conversation.

  • ren
  • Offline
  • Member
  • Member
  • Council Member
  • Council Member
  • Not anywhere near the back of the bus
More
20 Oct 2016 15:47 #262014 by ren
Replied by ren on topic SSL certificate
...yea, except the certificate uses rsa encrypted sha-256 signatures...

Windows 7 is incapable of communicating securely with totjo because it is obsolete. You should run at least windows 8.1
IE10 is also obsolete, as are previous versions of IE...
Convictions are more dangerous foes of truth than lies.

Please Log in to join the conversation.

  • ren
  • Offline
  • Member
  • Member
  • Council Member
  • Council Member
  • Not anywhere near the back of the bus
More
20 Oct 2016 15:59 #262016 by ren
Replied by ren on topic SSL certificate
We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...
Convictions are more dangerous foes of truth than lies.
The following user(s) said Thank You:

Please Log in to join the conversation.

  • Visitor
  • Visitor
20 Oct 2016 16:03 #262017 by
Replied by on topic SSL certificate
Well I'm in an enterprise environment most the time, so I'm SoL, but I haven't noticed it one my home of, laptops, or iThings.

Please Log in to join the conversation.

  • Visitor
  • Visitor
20 Oct 2016 16:06 - 20 Oct 2016 17:01 #262019 by
Replied by on topic SSL certificate
Chiming in as someone in the IT industry, in general, not to anyone specific... Listen to Ren and update your OS / Browser if possible. :D


https://www.google.com/chrome/browser/

https://www.mozilla.org/firefox
Last edit: 20 Oct 2016 17:01 by .

Please Log in to join the conversation.

  • Visitor
  • Visitor
20 Oct 2016 16:51 #262032 by
Replied by on topic SSL certificate
Oh I'm not arguing. I'm not sure if you were addressing, I think you meant it general. Either way he is right 100%. I just commented to say that some of us can't help our settings. Not much that can done about it though, like you and he said, 3everyone should upgrade for security sake not just TOJO.

Please Log in to join the conversation.

Moderators: Zero, Verheilen, ChaotishRabe, Morkano, Rini, Tavi, Khwang