Sample Header Ad - 728x90

How to fix browser “Not secure” icon for given Apache config?

0 votes
1 answer
222 views
When configuring ssl.conf for Apache 2.2.4, I want to use some configuration like the below: SSLEngine on SSLCertificateFile /opt/alfresco/deploy/ssl/crt/testdns.com.crt SSLCertificateKeyFile /opt/alfresco/deploy/ssl/private/testdns.com.key SSLCertificateChainFile /opt/alfresco/deploy/ssl/crt/intermediate.crt SSLVerifyClient none SSLVerifyDepth 1 SSLOptions +StdEnvVars +StrictRequire SSLProtocol -ALL +TLSv1 SetEnv nokeepalive ssl-unclean-shutdown SSLProtocol +TLSv1 +TLSV1.2 When I use +TLSv1 only, it gives me some error like below for my API calls: javax.net.ssl.SSLException: Received fatal alert: protocol_version If I use both protocols SSLProtocol +TLSv1 +TLSv2, it gives a browser “Not secure” indicator.  How do I prevent it? Cases are as follows: - If I use only +TLSv1: My API calls are working fine. - If I use only +TLSv2: Browser shows secure icon, but API call fails and gives the above error. - If I use both, still browser shows “Not secure” icon. Screenshot of browser with “Not secure” info indicator What is the solution for it?
Asked by Iván Carvallo (9 rep)
Feb 18, 2020, 12:41 PM
Last activity: Jul 31, 2024, 10:54 PM