1

Hello i have this error with IE and Google chrome in Windows XP but my website work with Windows Seven (all browser) and Firefox (windows XP too)

I learn in internet the problem its caused by ECDSA cipher

VirtualHost:

SSLCertificateFile    /etc/apache2/ssl/cert.crt
SSLCertificateKeyFile /etc/apache2/ssl/key.key
SSLCertificateChainFile /etc/apache2/ssl/COMODO_EV_SHA-256_bundle.crt

SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"

What is the good cipher for all OS and browser ? Iam on debian 7 and apache Thanks you

Improve this question

1 Answer 1

Reset to default
0

The Mozilla wiki has an excellent article on configuring the ciphers used by Apache. They provide example strings for three different levels of compatibility depending on your needs.

You should also check that your version of Apache supports elliptic curve crypto. You can find more detail here.

Lastly, try using SSL Labs to check your site for cipher compatibility with various browsers. It will also provide a grade for your SSL configuration and suggestions for improving it (if needed).

Improve this answer
2
  • Thanks for answer my score for SSL Labs is A, this old cipher are secure ? wiki.mozilla.org/Security/… Its not dangerous ?
    – pulsar
    Jul 28, 2015 at 14:35
  • No, not dangerous. The low includes three older cipers and is missing one new one (CAMELLIA). If you need to support older browsers it will work just fine. However, if you don't need to support them go with Intermediate.
    – mmccowan
    Jul 28, 2015 at 18:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .