SSL warning page includes other resources which are not secure

sslssl-certificate

I have two web pages that sits on identical servers

  1. https://cupstelaviv.com/index.html
  2. https://app.cupsapp.com/index.html

They both sit on identical servers (different SSL certificate)

The second one gives me SSL warning

Your connection to app.cupsapp.com is encrypted with 256-bit encryption. However, this page includes other resources which are not secure. These resources can be viewed by others while in transit, and can be modified by an attacker to change the behavior of the page.

The connection uses TLS 1.0.

The connection is encrypted using AES_256_CBC, with SHA1 for message authentication and RSA as the key exchange mechanism.

What could be the problem ?

Best Answer

The error I see is different.

This is not the site you are looking for

This error happens when you are using a certificate generated for another hostname. In this case, it looks like the certificate you are using for app.cupsapp.com was generated for cupstelaviv.com.

In order to avoid the warning, you need to purchase and install a certificate for the hostname app.cupsapp.com.

Related Topic