SSL certificate

I've been getting a message at work each time I try to access ToTJO, that the SSL certificate is too low, so now I can only access this site from my mobile phone.

Is this a server side issue, or is my company run by Sith Lords trying to stop me from becoming a Jedi? :lol:

I need a cert for my blackberry too

too low?!

Can you specify what the errors are, and what OS versions/browser you are using? The ssl setup is fairly high end.

ren wrote: too low?!

Can you specify what the errors are, and what OS versions/browser you are using? The ssl setup is fairly high end.

I'm not at work yet. As soon as I get there this afternoon I'll post the details here.

I get the same error in both IE 10 and Chrome. My PC runs Windows 10

Not trying to overstep here, but Chrome 53.0.2785.143 m on Enterprise 7 SP1 is telling me that is the

The certificate for this site expires in 2017 or later, and the certificate chain contains a certificate signed using SHA-1.

I am assuming that SHA-1 is the deal breaker here. MS, Google, and Mozilla all are starting to want 2 or 3.

...yea, except the certificate uses rsa encrypted sha-256 signatures...

Windows 7 is incapable of communicating securely with totjo because it is obsolete. You should run at least windows 8.1
IE10 is also obsolete, as are previous versions of IE...

We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...

Well I'm in an enterprise environment most the time, so I'm SoL, but I haven't noticed it one my home of, laptops, or iThings.

Chiming in as someone in the IT industry, in general, not to anyone specific... Listen to Ren and update your OS / Browser if possible.


https://www.google.com/chrome/browser/

https://www.mozilla.org/firefox

Oh I'm not arguing. I'm not sure if you were addressing, I think you meant it general. Either way he is right 100%. I just commented to say that some of us can't help our settings. Not much that can done about it though, like you and he said, 3everyone should upgrade for security sake not just TOJO.

The trouble is logging in from work sometimes. No control whatsoever.

:ohmy: ...Not that I do that... :dry: :evil:

ren wrote: We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...

How

Here is what I get:

Could not connect to server.

Overview:
Could not connect to www.templeofthejediorder.org.

Details:
Peer disconnected after first handshake message: Possibly SSL/TLS Protocol level is too low or unsupported on the server.

carlos.martinez3 wrote:

ren wrote: We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...

How

How to get your bosses to upgrade the work PCs? I don't know, but telling them you can't connect to totjo probably won't hep

I'll look into enabling no-longer-secure ciphers for those of you who can't do without when I have the time, possibly tonight?

ren wrote:

carlos.martinez3 wrote:

ren wrote: We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...

How

How to get your bosses to upgrade the work PCs? I don't know, but telling them you cman't connect to totjo probably won't hep

I'll look into enabling no-longer-secure ciphers for those of you who can't do without when I have the time, possibly tonight?

For my blackberry , or will into longer be able to log in with my Mobil?

carlos.martinez3 wrote:

ren wrote:

carlos.martinez3 wrote:

ren wrote: We're in a situation where already chrome and android users get downgraded to http1 because we don't use a technology which was only published as a RFC only 2 years ago...

We could downgrade, but really, you guys should be upgrading...

How

How to get your bosses to upgrade the work PCs? I don't know, but telling them you cman't connect to totjo probably won't hep

I'll look into enabling no-longer-secure ciphers for those of you who can't do without when I have the time, possibly tonight?

For my blackberry , or will into longer be able to log in with my Mobil?

Hardware vendors like to force their customers to buy new hardware in order to get software updates, so my guess is blackberry would tell you to get a new phone.