铬39和40中的ERR_SSL_PROTOCOL_ERROR，但在铬36工作。帮助修复铬39 [英] ERR_SSL_PROTOCOL_ERROR in chrome 39 and 40 but works in chrome 36.Help fix in chrome 39

问题描述

我可以在Chrome 36和IE8中访问网址，但是在Chrome 39或40或Firefox 35中，则会引发错误：

无法建立到服务器的安全连接。这可能是服务器的一个
问题，或者它可能需要您没有的客户端
身份验证证书。

错误代码：ERR_SSL_PROTOCOL_ERROR}。

看来这是一个与SSL证书有关的问题。我怎样才能解决这个问题？

Google宣布他们将开始从Chrome 39开始取消对SHA-1加密哈希算法的支持。根据Google的说法：

在Chrome的用户界面中，证书链使用SHA-1且在2017年1月1日之前有效的HTTPS站点将不再显示为完全可信。
< blockquote>

有几个网站可以提供您的SSL证书链的详细分析，例如 Qualys SSL实验室的SSL测试。

Google Chrome确实有一个高风险的命令行选项 - -ignore-certificate-errors 这可能会绕过某些证书错误。请注意，忽略证书错误会使您的所有SSL流量都有可能被窃听。

这也可能是一个新的错误。 Google从Chrome 38中使用OpenSSL库切换到它自己的BoringSSL库。要在Chrome中报告错误，请访问 chrome：// help / 并点击报告问题 。

I am able to access a URL in Chrome 36 and IE8 but in Chrome 39 or 40 or Firefox 35 it throws the error:

Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.

Error code: ERR_SSL_PROTOCOL_ERROR}.

It seems that it is an issue related to the SSL certificate. How can I fix this?

解决方案

Google announced that they would begin removing support for SHA-1 cryptographic hash algorithm beginning with Chrome 39. According to Google:

HTTPS sites whose certificate chains use SHA-1 and are valid past 1 January 2017 will no longer appear to be fully trustworthy in Chrome’s user interface.

There are several sites which can provide detailed analysis of your SSL certificate chain, such as Qualys SSL Labs' SSL Test.

Google Chrome does have a highly risky command-line option --ignore-certificate-errors which might bypass certain certificate errors. Be aware that ignoring certificate errors puts all of your SSL traffic at risk of being eavesdropped on.

It's also possible that this is a new bug. Google switched from using OpenSSL library to it's own "BoringSSL" library in Chrome 38. To report a bug in Chrome visit chrome://help/ and click "Report an issue".

这篇关于铬39和40中的ERR_SSL_PROTOCOL_ERROR，但在铬36工作。帮助修复铬39的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！