[BlueOnyx:18535] SSL Help please

Colin Jack colin at mainline.co.uk
Sun Oct 18 15:46:22 -05 2015


Some help for the clueless please? :)

We have a website on a 5106R server which has a Thawte SSL123 certificate installed.
Certficate has expired so I renewed and imported it to the website.
I installed this okay the first time!

Cert comes up as valid but …

Your connection to london.co.uk is encrypted using an obsolete cipher suite. 
Further, this page includes other resources which are not secure. 
These resources can be viewed by others while in transit, and can be modified by an attacker to change the look of the page.

The connection uses TLS 1.0.

The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and DHE_RSA as the key exchange mechanism.


I thought maybe I need to renew the intermediate certificates?
That said I cannot remove the existing intermediates I have on there … in Certificate Authority Management I try and remove but nothing happens and when I try and add a new intermediate cert it also fails.

I am not up to speed on SSL and I must be doing something dumb … can anybody help?

Thanks

Colin





More information about the Blueonyx mailing list