While configure ssl.conf for apache 2.2.4, I want to use some configuration like below
SSLEngine on SSLCertificateFile /opt/alfresco/deploy/ssl/crt/testdns.com.crt SSLCertificateKeyFile /opt/alfresco/deploy/ssl/private/testdns.com.key SSLCertificateChainFile /opt/alfresco/deploy/ssl/crt/intermediate.crt SSLVerifyClient none SSLVerifyDepth 1 SSLOptions +StdEnvVars +StrictRequire SSLProtocol -ALL +TLSv1 SetEnv nokeepalive ssl-unclean-shutdown SSLProtocol +TLSv1 +TLSV1.2
When I use +TLSv1 only it gives me some error like below for my API calls
javax.net.ssl.SSLException: Received fatal alert: protocol_version
If I use both protocols SSLProtocol +TLSv1 +TLSv2 both, it gives browser unsecure icon, how do I prevent it?
Case is like below If I use only +TLSv1 - My API calls are working fine If I use only +TLSv2 - browser shows secure icon but API call fails and give above error.
Is there any solution of it , let me know.