“由对等方关闭的连接"；通过HTTPS连接到已安装Windows 2003 Server SP2的SHA256 CA的Android 7.0 Nougat中发生错误 [英] "Connection closed by peer" error occurs in Android 7.0 Nougat while connecting to SHA256 CA installed Windows 2003 Server SP2 through HTTPS

问题描述

我的应用通过HTTPS与服务器接口(经典ASP)进行通信.
它在Android 7.0牛轧糖的早期版本中运行良好. (直到6.0)
但是，在Android 7.0手机和AVD(Android虚拟设备)中，发生了由对等方关闭的连接错误.
服务器是Windows 2003 Server SP2(SSL证书在2016年7月23日从SHA1更新为SHA256)，HTTPS，经典ASP
GeoTrust的服务器的SSL证书安装检查状态如下所示
(cryptoreport.geotrust.com/checker/views/certCheck.jsp)
我的服务器证书的GeoTrust检查状态屏幕截图
(未启用协议:TLS1.1，TLS1.2)

My app communicates with server interface (classic ASP) through HTTPS.
It has been workd very well in prior version of Android 7.0 Nougat. (until 6.0)
But, Connection closed by peer Error occurs in Android 7.0 phone and AVD(Android virtual device).
Server is Windows 2003 Server SP2 (SSL Certificate was updated from SHA1 to SHA256 in Jul 23th, 2016), HTTPS, Classic ASP
Server's SSL certificate installation check status of GeoTrust is like below
(cryptoreport.geotrust.com/checker/views/certCheck.jsp)
GeoTrust check status screen shot of my Server's certificate
(Protocols not enabled : TLS1.1, TLS1.2)

我认为，Android 7.0无法与TLS1.0的Windows 2003 Server进行SSL握手(只有TLSv1.1，TLSv1.2才能支持与SHA256证书的成功握手?)
这是对的吗?
而且我刚刚找到了此修补程序: http://support.microsoft.com/kb/968730
这可以解决吗?

In my opinion, Android 7.0 fails SSL handshaking with Windows 2003 Server of TLS1.0(only TLSv1.1, TLSv1.2 can support successful handshaking with SHA256 certificate?)
Is this right?
And I just found this hot fix : http://support.microsoft.com/kb/968730
Is this can be a solution?

我该如何解决这个问题

推荐答案

最后，我们将服务器更改为Win 2008 ...; 我认为这是唯一的解决方案.

Finally, we changed server to Win 2008...;; That's the only solution in my opinion.

这篇关于“由对等方关闭的连接"；通过HTTPS连接到已安装Windows 2003 Server SP2的SHA256 CA的Android 7.0 Nougat中发生错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！