[Tracker-discuss] [issue603] update the SSL certificate

[Nick Coghlan]

Nick Coghlan added the comment:

I'm not sure why the direct link isn't working, but if you click on the "46.4.197.70" heading it will take you through to the detailed report.

"High"lights:

* This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B.
* Certificate has a weak signature and expires after 2015. Upgrade to SHA2 to avoid browser warnings.
* The server supports only older protocols, but not the current best TLS 1.2. Grade capped to C.
* The server does not support Forward Secrecy with the reference browsers.

Of those, only the SHA1 signature is related to the cert itself - the rest have to do with Upfront's server configuration.

----------
nosy: +ncoghlan

_______________________________________________________
PSF Meta Tracker <metatracker at psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue603>
_______________________________________________________