HETPE3B Posted January 17, 2016 Share Posted January 17, 2016 I recently noticed the message shown in the title. I have SSL certificate installed. I'm using prestashop 1.4.6.2 When I'm using Chrome the "https" in the address bar is not green, but gray and this is what caused my attention. I did click on the "lock" symbol and the message did show me: " your connection to "mywebsite.com" is encrypted using an obsolete cypher suite. Furher this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page. The connection uses TLS 1.0. The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and RSA as the key exchange mechanism" What and how should be updated, so the "https" symbol revert back to green again? My other website running magento webstore is showing green "https" symbol and showing TLS 1.2. Link to comment Share on other sites More sharing options...
HETPE3B Posted January 18, 2016 Author Share Posted January 18, 2016 I recently noticed the message shown in the title. I have SSL certificate installed. I'm using prestashop 1.4.6.2 When I'm using Chrome the "https" in the address bar is not green, but gray and this is what caused my attention. I did click on the "lock" symbol and the message did show me: " your connection to "mywebsite.com" is encrypted using an obsolete cipher suite. Further this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page. The connection uses TLS 1.0. The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and RSA as the key exchange mechanism" What and how should be updated, so the "https" symbol revert back to green again? My other website running magento webstore is showing green "https" symbol and showing TLS 1.2. Ok, I was able to overcome the "obsolete cipher suite" thing by asking the hosting provider to move the account to the server, which supports TLS1.2. Now it is showing "modern cipher suite". Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now