getting ssl errors with geoplugin

225 views
Skip to first unread message

bbishop...@gmail.com

unread,
Apr 10, 2017, 1:43:48 PM4/10/17
to geoPlugin
Hi, it seems there might be a problem with geoplugins cert - a recent change in chrome may be blocking the script, see the attachment which shows net::ERR_SSL_OBSOLETE_CIPHER errors. Anyone seen something like this before? Thanks

30216718.png

geoPlugin Support

unread,
Apr 10, 2017, 1:56:00 PM4/10/17
to geop...@googlegroups.com
Hi,

Thanks for raising this - it is in fact not an error with our
certificate, but an "issue" with the cipher used for encryption. In fact
it isn't an issue, but one that recent chrome releases classes as an
issue. We are aware of it but at the moment will not change our cipher
since changing cipher to a more recent one will kill rendering for many
more users than it will fix, simply because older browsers do not
support modern ciphers.

It's a case of "damned if you do, damned if you don't". As a provider of
services, we have to look toward what the majority of users want, and in
our client-server (json/javascript) logs, there are many more users on
old browsers than on modern chrome showing the issue. Thus, we cannot
change as it will kill SSL for the majority.

Sorry this doesn't help your case though, but we cannot simply make
sweeping changes without much thought, since we could cause more
problems than a "solution" fixes.

Kind regards,
Andy
> --
> You received this message because you are subscribed to the Google
> Groups "geoPlugin" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to geoplugin+...@googlegroups.com.
> To post to this group, send email to geop...@googlegroups.com.
> Visit this group at https://groups.google.com/group/geoplugin.
> For more options, visit https://groups.google.com/d/optout.

coo...@gmail.com

unread,
Sep 20, 2017, 8:02:48 AM9/20/17
to geoPlugin
Any update on this? With Google announcing that it's going to start displaying "not secure" on people's websites who do not have an https website starting in October, more and more will be making the switch. Would like a solution to continue using your plugin. Let us know.

geoPlugin Support

unread,
Sep 20, 2017, 8:06:58 AM9/20/17
to geop...@googlegroups.com
The insecure ciphers (principally 3DES) have been removed from the SSL
web service preventing this error
>>> Visit this group at https://groups.google.com/group/geoplugin [1].
>>
>>> For more options, visit https://groups.google.com/d/optout [2].
>
> --
> You received this message because you are subscribed to the Google
> Groups "geoPlugin" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to geoplugin+...@googlegroups.com.
> To post to this group, send email to geop...@googlegroups.com.
> Visit this group at https://groups.google.com/group/geoplugin.
> For more options, visit https://groups.google.com/d/optout.
>
>
> Links:
> ------
> [1] https://groups.google.com/group/geoplugin
> [2] https://groups.google.com/d/optout

Reply all
Reply to author
Forward
0 new messages