How to fix browser “Not secure” icon for given Apache config?
0
votes
1
answer
222
views
When configuring
What is the solution for it?
ssl.conf
for Apache 2.2.4,
I want to use some configuration like the below:
SSLEngine on
SSLCertificateFile /opt/alfresco/deploy/ssl/crt/testdns.com.crt
SSLCertificateKeyFile /opt/alfresco/deploy/ssl/private/testdns.com.key
SSLCertificateChainFile /opt/alfresco/deploy/ssl/crt/intermediate.crt
SSLVerifyClient none
SSLVerifyDepth 1
SSLOptions +StdEnvVars +StrictRequire
SSLProtocol -ALL +TLSv1
SetEnv nokeepalive ssl-unclean-shutdown
SSLProtocol +TLSv1 +TLSV1.2
When I use +TLSv1 only, it gives me some error like below for my API calls:
javax.net.ssl.SSLException: Received fatal alert: protocol_version
If I use both protocols SSLProtocol +TLSv1 +TLSv2,
it gives a browser “Not secure” indicator.
How do I prevent it?
Cases are as follows:
- If I use only +TLSv1: My API calls are working fine.
- If I use only +TLSv2: Browser shows secure icon,
but API call fails and gives the above error.
- If I use both, still browser shows “Not secure” icon.

Asked by Iván Carvallo
(9 rep)
Feb 18, 2020, 12:41 PM
Last activity: Jul 31, 2024, 10:54 PM
Last activity: Jul 31, 2024, 10:54 PM