Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Learn More

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

what do we change on windows server 2k8 iis7 to fix "Secure Connection Failed" that is appearing with version 37 and 37.0.1?

  • 2 antwoorden
  • 2 hebben dit probleem
  • 5 weergaven
  • Laatste antwoord van cor-el

gavin78
gavin78
more options

We host https://www.prereg.net and the recent updates (version 37 and 37.0.1) have caused a "Secure Connection Failed" message to appear. We have contacted our hosting company and our SSL provider (geotrust) and neither of them are able to help with this issue. Can anyone tell us what we might need to alter on our server in order to fix this issue? We have a valid certificate and we have SSL3 and TLS 1.2 enabled.

Thank you very much for your help

We host https://www.prereg.net and the recent updates (version 37 and 37.0.1) have caused a "Secure Connection Failed" message to appear. We have contacted our hosting company and our SSL provider (geotrust) and neither of them are able to help with this issue. Can anyone tell us what we might need to alter on our server in order to fix this issue? We have a valid certificate and we have SSL3 and TLS 1.2 enabled. Thank you very much for your help

Alle antwoorden (2)

user633449
user633449
more options

I'd suggest following the setup advised here: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility

Your website accepts old cyphers, which are weak, https://www.ssllabs.com/ssltest/analyze.html?d=prereg.net

Godaddy should be able to help you update to a more secure system.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

The browser console shows:

This site uses the cipher RC4 for encryption, which is deprecated and insecure.
  • TLS_RSA_WITH_RC4_128_SHA

Attached screenshot from Nightly with domain added to security.tls.insecure_fallback_hosts

Bewerkt door cor-el op