New SSL Cert for website not encrypting whole site

[IATechsupport]

We have an issue with a new comodo SSL cert for an existing website, which has been done many times in the past with no problem. https://www.ghs-direct.com

This time the certificate is not encrypting the whole site, and has the little warning triangle and says its not encrypted.

Comodo, say its because of weak ciphers
https://sslanalyzer.comodoca.com/?url=www.ghs-direct.com

But I'm not so sure, it's never been a problem in the past, and we have changed anything

Can you point us in the right direction, to try and solve this please.

 

[Janko1000]

You need to change the Ciphers in the NGINX Template.
http://download1.parallels.com/Ples...nistration-guide/index.htm?fileName=68693.htm

cd /etc/nginx/ssl
openssl dhparam -out dhparam.pem 4096

ssl_dhparam /etc/nginx/ssl/dhparam.pem;
ssl_ciphers 'AES256+EECDH:AES256+EDH:!aNULL';
ssl_prefer_server_ciphers on;
ssl_ecdh_curve secp384r1;
add_header Strict-Transport-Security "max-age=31536000;includeSubDomains; preload";

https://www.ssllabs.com/ssltest/analyze.html?d=ghs-direct.com

 

[IATechsupport]

I have done this, now get an A+ on the ssllabs.com test , restarted everything and still get the same problem

 

[UFHH01]

Hi IATechsupport,

you serve http and https - content and should change all http - content to be served over https:

<img src="http://www.ghs-direct.com/_images/icon-facebook.png" alt=""><img src="http://www.ghs-direct.com/_images/icon-facebook-hover.png" alt=""></a>

<img src="http://www.ghs-direct.com/_images/icon-twitter.png" alt=""><img src="http://www.ghs-direct.com/_images/icon-twitter-hover.png" alt=""></a>

 

[IATechsupport]

Hi UFHH01,

Top man that worked many thanks

 

[UFHH01]

Hi IATechsupport,

please consider as well to use "Like" and/or "Best Answer" options here in the forum, to improve the forum and to help forum users to find answers to their questions and/or issues/problems. You find these options on the bottom of each post here in the forum.

 

[IATechsupport]

Hi IATechsupport,

you serve http and https - content and should change all http - content to be served over https:

<img src="http://www.ghs-direct.com/_images/icon-facebook.png" alt=""><img src="http://www.ghs-direct.com/_images/icon-facebook-hover.png" alt=""></a>

<img src="http://www.ghs-direct.com/_images/icon-twitter.png" alt=""><img src="http://www.ghs-direct.com/_images/icon-twitter-hover.png" alt=""></a>

 

[IATechsupport]

Ok will do