Strict-SSL about mochiweb

[etrepum]

Could you be a little more clear about what you mean by "strict-ssl"?

[alawatta]

Tx for quick response.
We establish web service, based on mochi-web. (SSL enable) when we check our site using below URL, it shows some errors.
https://www.sslshopper.com/ssl-checker.html
here attached screen shot of above validation output.

Reference:
https://blog.cloudflare.com/introducing-strict-ssl-protecting-against-a-man-in-the-middle-attack-on-origin-traffic/

[etrepum]

Looks like you need to follow the instructions and include the intermediate certificate, normally this is done by concatenating your public key and the intermediate certificate’s public key and configuring the application to use that file. I don’t recall which is supposed to go first (or if that matters) but I’m sure if you follow cloudflare’s links they’ll have more information.

[alawatta]

Tx a lot for help & let you know the status ..

[alawatta]

it is resolved after adding following option. Tx for help..
{cacertfile, PemFile} to Option List in mochiweb_http:start.

ex:
Options = [{ip, Ip},{port, Port},{ssl, true}, {ssl_opts, [{certfile, CertFile},{keyfile, KeyFile},{cacertfile, PemFile}]}]