Printable View
I started getting an error message every time I want to use some services on my Telstra phone that says " Your device does not support the recent SHA security certificate upgrade".
More info:
https://crowdsupport.telstra.com.au/t5/Announcements/What-you-need-to-know-about-our-security-certificate-upgrade/ba-p/614491
Im using an updated Q10.
10.3.3 or 10.3.2? Or is Telstra assuming that you've got a BBOS phone?
According to what little scraps of info are on the Knowledge Base, BB10 is supposedly compatible with SHA-2 certificates.
It makes no difference whether or not it is 10.3.2 or 10.3.3 as I still get the same message even after upgrading to OS 10.3.3.2049.
I have being impacted as opposed to the information on the Blackberry site.
It could be because the sites are making the decision based on the User-Agent string rather than what the protocol handshaking indicates. Even Qualys SSL Labs makes that mistake:
- Browse to ssllabs.com
- Click on Test your browser
- The site may complain about the user-agent not supporting TLS 1.2 even though lower down it says TLS 1.2 is supported, and supported signatures includes many SHA2 algorythims.
- Click on "Other User-Agents"
- Click on "Test your browser"
- Now the report should be correct.
Unfortunately due to a lot of history browser user agents are often used to make decisions that can't really justified because there are no standards on what the user agent string should contain. Also browsers have been lying in their user agent strings since IE started telling servers it was Mozzilla. Anyway here are screen shots of my first and subsequent visits to ssllabs.com browser test page:
Attachment 419160Attachment 419159
Thanks Richard, problem identified Blackberry browser :eek:
Switched to Chrome and all is good, no issues there.
