# SSL/TLS errors on very old browsers connecting to Discourse

**URL:** https://meta.discourse.org/t/ssl-tls-errors-on-very-old-browsers-connecting-to-discourse/127474
**Category:** Support
**Created:** [September 3, 2019, 9:11am UTC](https://meta.discourse.org/t/ssl-tls-errors-on-very-old-browsers-connecting-to-discourse/127474 "2019-09-03T09:11:06Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [September 7, 2019, 12:13am UTC](https://meta.discourse.org/t/ssl-tls-errors-on-very-old-browsers-connecting-to-discourse/127474/7 "2019-09-07T00:13:36Z")

</div>

> [@joa](#):
>
> **User Agent:** Mozilla/5.0 (iPod; CPU iPhone OS 6\_1\_6 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10B500 Safari/8536.25

I don’t think Safari 6 will work even when you solve the TLS issues by adding additional cipher suites.

You can add missing cipher suites by overriding the nginx config file. Add the following snippet (untested, but it should work) to the `hooks` section of `app.yml` and change the value of `ssl_ciphers` to your liking.

```plaintext
  after_ssl:
    - replace:
        filename: "/etc/nginx/conf.d/discourse.conf"
        from: /ssl_ciphers .*/
        to: ssl_ciphers <your_complete_cipher_list>;

```

BTW: I’m trying to add support for Elliptic Curve certificates to Discourse which would make it work for IE11 out of the box.

[https://github.com/discourse/discourse\_docker/pull/444](https://github.com/discourse/discourse_docker/pull/444)

---

_[View the full topic](https://meta.discourse.org/t/ssl-tls-errors-on-very-old-browsers-connecting-to-discourse/127474)._