Safari on iOS8 and IE11 couldn't connect to website

Minority of my website visitors (maybe less than 1%) are reporting to me that they couldn’t access my website. They all are using older versions of devices and web browsers.

I was curious and wanted to test too. Unfortunately, my older devices are only iphone on iOS8, and an IE11 on windows 8.1. I can confirm these devices couldn’t access my website.

The error message was:

iOS8:
Safari cannot open the page because it could not establish a secure connection to the server.

IE11:
This page can’t be displayed

However, I could load the website using either Chrome, Firefox, and Opera on the same machine which has problem with IE11.

My domain is https://www.tewfree.com

Got an A rating from SSL Labs.
https://www.ssllabs.com/ssltest/analyze.html?d=www.tewfree.com

Also, Crt.sh
https://crt.sh/?q=tewfree.com

I’m quite not sure the version of certbot client, since I use directadmin. However, this is the second line of /usr/local/directadmin/scripts/letsencrypt.sh

#VERSION=1.1.39

I can login as a root on my machine which is CentOS8. Thank you!

Your server is well configured. That means, though, that you offer no cipher supported by safari 8 (CBC suites, usually) Qualys SSL Labs - Projects / User Agent Capabilities: Safari 8 / iOS 8.4

This is to be expected; as neither of those is capable of connecting via TLSv1.2, TLSv1.3 [given the supported ciphers].
You can click the links within SSL Labs to review the ciphers supported by those operating systems.

edit: try adding 0xC028 (and/or 0xC027) cipher.

Hi @tewfree

read the Ssllabs-output:

Safari 6 / iOS 6.0.1 Server sent fatal alert: handshake_failure
Safari 7 / iOS 7.1 R Server sent fatal alert: handshake_failure
Safari 7 / OS X 10.9 R Server sent fatal alert: handshake_failure
Safari 8 / iOS 8.4 R Server sent fatal alert: handshake_failure
Safari 8 / OS X 10.10 R Server sent fatal alert: handshake_failure

No connection with Safari 8, the Cipher Suites are too restricted.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.