This is the first tool they should use, in my opinion, SSL Server Test (Powered by Qualys SSL Labs)
3 Likes
Yes, it is a shame. That is due to using the Let's Encrypt "short chain". If you were using Apache or nginx, two more popular servers, this would not be a problem. By default those easily use the Let's Encrypt "long chain" which works for older Android. Sadly, your use of IIS server and the need to support older Android is more difficult with Let's Encrypt (see my prior post). IIS makes it difficult to set the Let's Encrypt "long chain".
4 Likes
That might not be easy within Windows Server 2012.
4 Likes
FYI - using LE in the future won't support TLS v1.0 & v1.1 nor SHA-1.
4 Likes
I am pretty sure that means ACME clients will not be able to use TLS v1.0 or 1.1 any longer when they request a cert. Clients (browsers, ...) connecting to websites that happen to use a Let's Encrypt cert are not affected.
7 Likes
Right, but for the total working automatic solution (which the LE Certs are a subset of) will be likely troublesome in the future.
3 Likes
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.