Forum Discussion

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 11, 2016

Hello,

 

You should check the hash fingerprint of the server certificate and all CA in the chain. Should be sha-2 at least, SHA-1 is now deprecated.

 

You may also use a week cipher. Try doing an ssl labs test : https://www.ssllabs.com/ssltest/

 

  • Nathaneil0227_2's avatar
    Nathaneil0227_2
    Icon for Nimbostratus rankNimbostratus
    May 12, 2016
    Yann Hi, I am not very good at SSL. Do you mean that I nead to configure Chain cert in my SSL client profile? Thanks, -Nat
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    May 12, 2016
    Hi, you should configure the key and associated certificate, the certificate chain that should include the intermediates and root certificate
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    May 12, 2016
    Browsers told you that the connection is unsecure but in general you have the reason. If the chain is not configured, the browser reach an alert as he is not able to identify the whole chain.