Purchase Linux CDs / DVDs / Flash Drives at OSDisc.com

Welcome to Our Community

While Linux.org has been around for a while, we recently changed management and had to purge most of the content (including users). If you signed up before April 23rd please sign up again. Thanks!

Cloudflare free SSL do not allow HTTPS access via old IE6 and Android 2.3.X

Discussion in 'Web Server' started by postcd, Jun 29, 2016.

  1. postcd

    postcd Guest

    I have free Comodo SSL certifficate from Cludflare and i cant access my website via https via Android 2.3.6 and also on Windows XP internet explorer. These are old apps, but still i think it is quite a issue.

    ssllabs.com/ssltest says following errors when i test my domain:
    Android 2.3.7 No SNI 2 Server sent fatal alert: internal_error
    IE 6 / XP No FS 1 No SNI 2 Server sent fatal alert: handshake_failure
    IE 8 / XP No FS 1 No SNI 2 Server sent fatal alert: internal_error
    SNI - Browser does not support Server Name Indication
    FS - Browser effectively does not support Forward Secrecy

    Please what do you suggest? I do not wish to purchase SSL. I see Lets Encrypt free SSL has A+ rating on this page: https://www.ssllabs.com/ssltest/analyze.html?d=minehub.de
    Free WoSign certifficate shows some mismatch error, but shows the https page.

    Is my only option to switch to other certificate authority? Which one will allow me to browser on IE6, IE8 and old Android as mentioned?

    #1 postcd, Jun 29, 2016
    Last edited: Jun 29, 2016
  2. iodisciple

    iodisciple New Member

    Sep 8, 2017
    Likes Received:
    I would (and did) just purchase a certificate, they're from $10 a year I believe. I've also worked with Lets Encrypt. Now experiences vary, but in retrospect I would never do a Lets Encrypt installation again and would just cough up the $10. My 2 cents.
  3. Rob

    Rob Administrator
    Staff Member

    Oct 27, 2011
    Likes Received:
    Hey there,

    Here on Linux.org we're using the free cloudflare service, then also have a lets encrypt ssl on the server side.

Share This Page