I have a free ssl certificate installed but ssl 3.0 still shows unsecure

Hi there.
I use your services at www.maderradio.net
I am having trouble putting an IFrame on my page and this is what the lady from my 5radio server has said which is confusing to me.
I’ve never had to deal with SSL before.
So i’m new to it.
How do I fix these errors.
It appears that the website certificate on your domain is not trusted by specific browsers.
TLS 1.3Yes
TLS 1.2Yes
TLS 1.1No
TLS 1.0No
SSL 3No
SSL 2No
And i want these to be yes, so how do I fix this.
I’m using lets encrypt for my signer.
Anyone that can help this would be greatly appreciated a ton.
As again, I don’t know how to fix this.
The information above was porvided by the technical support provider of my radio station’s web player.
Thanks.
Jerry Mader

Maybe it’s because of our security system?

You can’t change server values on free hosting; plus enabling all other versions of the SSL/TLS protocol will expose your website (and any other website hosted on the same server as yours) to vulnerabilities, so that is a big no-no.

4 Likes

So then what do I do then about the frame not loading?
I don’t know how else to make my site trusted by all browsers so my frame will work.
It’s giving the error “https://global2.citrus3.com refused to connect.” How can i get it to actually connect?
I’m not certainly trying to mess up anyone elses sites or anything so yeah, i don’t think i want those messed with but how else then, do i get the other sites to trust the certificate?
Thanks again for the reply, and I appologise if i’m asking too many questions here, but i’m new to installing ssl. Also is there a way to use a intermediate chain certificate from lets encrypt so that this can be fixed?
Is there an admin that can help with installing one for me since I’m not too familiar with it?
Hey thanks again guys.
Jerry Mader

A few things to note:

First of all, the URL is https://global2.citrus3.com:2020, not just https://global2.citrus3.com. The port number, the :2020 part, is important, or it will not work.

The error I see on your page is the following:

Firefox Can’t Open This Page

To protect your security, global2.citrus3.com will not allow Firefox to display the page if another site has embedded it. To see this page, you need to open it in a new window.

It seems that this global2.citrus3.com page has a security rule setup (specifically: content-security-policy frame-ancestors) that tells browsers that they should not embed it anywhere other than their own site.

So unless you tell all your visitors to disable key online security measures in their browsers, you won’t be able to embed this page, because the owners don’t allow it. The only other alternative is to ask Citrus3 to see if they can support embeds. But if they can’t or won’t, then you can’t embed their page.

Note that this issue has nothing to do with SSL.

4 Likes

Hi there.
Thank you for confirming what I thought to be true.
I thought the problem was on their site not mine.
ALso, yes i know about the port and such but I forgot to type it. And so what i done was to on the listen pages i’m making via wordpress, link to the site and make it open in a separate window or tab.
That way people can still keep the player open while they request a song.
I tried to install radioplayer on wordpress but keep getting errors.
I’m curious why things like stackible and that player give errors but other plugins don’t.
Anyway So from what you can see my ssl is fine? I installed it correctly?
Thanks
Jerry Mader

Yes, your SSL installation seems completely fine.

Whether a page can be embedded or not is basically the decision of the owner of web page. They can configure their site to allow embeds or not allow them. Some sites choose to allow it (or at least don’t specifically block it), others don’t.

4 Likes

If you paid for their services, then I assume that you are allowed to use the player

Maybe somewhere in their dashboard, you get the option to add a host (whitelist your domain) and then you can have an embedded radio player on your website.

Probably in javascript from the player, it also exists to check the host and when it notices that it is not an appropriate host then it does not work.

3 Likes

well, I’ve actually tried to tell these guys what’s going on over at Citrus 3 and they’re giving me the runaround about how it has to do with The two security systems clashing, and that maybe I shouldn’t use an iFrame after all maybe I should use a button. But I’ve already thought of this idea to begin with, so I’m kind of ahead of them on that one. But still if you provide a frame for somebody that frame should work no questions asked and it doesn’t. And yes, I do pay for this particular service and this particular hosting and I don’t see anywhere to whitelist my domain. she said that there’s no reason that this will not work because there a particular control panel has made this available so that everyone can use it. However, the proof is in the pudding, right? Because I’m trying to use it and it doesn’t work. I just really don’t like it when people try to pass the book and instead don’t take responsibility for their own issues.

I looked a bit on your site and I don’t see anywhere that you have this


nor in my browser as a REQ list

So please try to follow all the instructions from their tutorial from my last post…

Try every code/widget they offer to see which one works and which one is problematic, and if there is an option that starts with “public” and similar words - if you can turn it on that would suggest that your radio is available to everyone.

3 Likes

That’s the thing: I don’t see anything to suggest they actually provide this as a feature. They provide a web page people can use. That doesn’t mean that they also support embedding this web page into other sites.

Citrus3 appears to be providing widgets that you can embed in other sites (thanks @Oxy!). Please try using those widgets instead, as that’s functionality that Citrus3 actually offers for use in embedding.

If Citrus3’s widgets don’t provide the functionality you’re looking for, you could ask Citrus3 if they could add a widget for it. If they can’t do it reasonably quickly, you could choose to go to a competitor that does provide the features you’re looking for.

Just please consider that every company is free to offer the service they want with they features they choose to offer. It doesn’t automatically entitle you to other features they don’t offer.

4 Likes

@admin you thanked me a little too soon :upside_down_face:

They also have instructions for the player, although the instructions are 3 years old, and maybe something has changed.

But the user can certainly try to generate the code again,
maybe he should try to make a new radio and other things and try it because then maybe everything will fall into place


In any case, I think that their support service does not understand the problem when they talk about some security conflict between the two systems

iframe is something that is done by the browser, not the server…

if the iframe is allowed with them, then I could insert that iframe on a website on my local PC and it should work… but it doesn’t work

or the URL is not valid :joy:

I still think that maybe there is an option somewhere in the settings within the dashboard where the player/iframe is enabled/allowed, etc.

3 Likes

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.