Forum Discussion

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 11, 2016

Hello,

 

You should check the hash fingerprint of the server certificate and all CA in the chain. Should be sha-2 at least, SHA-1 is now deprecated.

 

You may also use a week cipher. Try doing an ssl labs test : https://www.ssllabs.com/ssltest/

 

  • Nathaneil0227_2's avatar
    Nathaneil0227_2
    Icon for Nimbostratus rankNimbostratus
    May 12, 2016
    Yann Hi, I am not very good at SSL. Do you mean that I nead to configure Chain cert in my SSL client profile? Thanks, -Nat
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 12, 2016
    Hi, you should configure the key and associated certificate, the certificate chain that should include the intermediates and root certificate
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 12, 2016
    Browsers told you that the connection is unsecure but in general you have the reason. If the chain is not configured, the browser reach an alert as he is not able to identify the whole chain.