1

Hello i have this error with IE and Google chrome in Windows XP but my website work with Windows Seven (all browser) and Firefox (windows XP too)

I learn in internet the problem its caused by ECDSA cipher

VirtualHost:

SSLCertificateFile    /etc/apache2/ssl/cert.crt
SSLCertificateKeyFile /etc/apache2/ssl/key.key
SSLCertificateChainFile /etc/apache2/ssl/COMODO_EV_SHA-256_bundle.crt

SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"

What is the good cipher for all OS and browser ? Iam on debian 7 and apache Thanks you

0

The Mozilla wiki has an excellent article on configuring the ciphers used by Apache. They provide example strings for three different levels of compatibility depending on your needs.

You should also check that your version of Apache supports elliptic curve crypto. You can find more detail here.

Lastly, try using SSL Labs to check your site for cipher compatibility with various browsers. It will also provide a grade for your SSL configuration and suggestions for improving it (if needed).

  • Thanks for answer my score for SSL Labs is A, this old cipher are secure ? wiki.mozilla.org/Security/… Its not dangerous ? – pulsar Jul 28 '15 at 14:35
  • No, not dangerous. The low includes three older cipers and is missing one new one (CAMELLIA). If you need to support older browsers it will work just fine. However, if you don't need to support them go with Intermediate. – mmccowan Jul 28 '15 at 18:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.