Jump to content

"your Connection To "xxxxxxx.com" Is Encrypted Using An Obsolete Cypher Suite


Recommended Posts

I recently noticed the message shown in the title.

I have SSL certificate installed. I'm using prestashop 1.4.6.2

 

When I'm using Chrome the "https" in the address bar is not green, but gray and this is what caused my attention. I did click on the "lock" symbol and the message did show me:

 

" your connection to "mywebsite.com" is encrypted using an obsolete cypher suite. Furher this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page.

The connection uses TLS 1.0.

The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and RSA as the key exchange mechanism"

 

What and how should be updated, so the "https" symbol revert back to green again? My other website running magento webstore is showing green "https" symbol and showing TLS 1.2.

Link to comment
Share on other sites

I recently noticed the message shown in the title.

I have SSL certificate installed. I'm using prestashop 1.4.6.2

 

When I'm using Chrome the "https" in the address bar is not green, but gray and this is what caused my attention. I did click on the "lock" symbol and the message did show me:

 

" your connection to "mywebsite.com" is encrypted using an obsolete cipher suite. Further this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page.

The connection uses TLS 1.0.

The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and RSA as the key exchange mechanism"

 

What and how should be updated, so the "https" symbol revert back to green again? My other website running magento webstore is showing green "https" symbol and showing TLS 1.2.

 

Ok, I was able to overcome the "obsolete cipher suite" thing by asking the hosting provider to move the account to the server, which supports TLS1.2. Now it is showing "modern cipher suite".

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...