Shulou(Shulou.com)06/01 Report--

This article will explain in detail what causes errors in SSL certificates. The editor thinks it is very practical, so I share it with you for reference. I hope you can get something after reading this article.

Under the current policy that major computer browsers around the world release multiple-choice HTTPS, many platform websites have no choice but to give up the simple and convenient HTTP ciphertext agreement to become a more secure HTTPS encryption protocol, while the vast majority of them generally use ssl certificates to convert HTTPS. With the emergence of a lot of incorrect ssl conditions, the following are the common causes of ssl certificate errors and their relative solutions, hoping to help you solve ssl certificate errors.

What are the reasons for SSL certificate errors?

Reason for SSL certificate error 1: the platform website certificate is not granted by a trusted certificate granting organization.

Analysis: reason 1: this is because the certificate is not in the trusted directory of the computer browser manufacturer. It can be installed in the "trust directory" of the computer browser according to the manual and certificate.

Method: select the item → content menu bar → certificate-→ import in the computer browser.

However, the method described is only applicable to the visa application form, and every machine and equipment on the preview website must be operated in this kind of practice, and there are great security risks from the visa processing document, so it is proposed to apply the ssl certificate granted by the authoritative CA organization.

Reason 2: the ssl certificate applied by the network server is not granted by the trusted CA organization all over the world.

Method: therefore, it is highly recommended to select an authoritative certificate.

The third reason, the ssl certificate has not been properly installed, you must check whether the previously existing or tested certificate has been deleted, if you are sure that the certificate of the platform website is appropriate and accurate, please restart webserver.

SSL certificate error reason 2: the SSL certificate includes a website domain name and URL is not the same.

Analysis:

Each ssl certificate matches a website domain name that is independent and is a full-site domain name FQDN (Fully Qualified Domain Name). When the certificate presented by the platform website includes a different website domain name and domain name, the system software will automatically report to remind the certificate website domain name not to be matched.

Method: you must apply for ssl certificate again. If there are multiple sites with the same domain name of the main website, you should apply for a ssl certificate for the domain name of the multi-site. Huandu Network Information Office has a variety of well-known brands of multi-website domain name ssl certificates, customers can choose according to their own requirements.

The third reason for SSL certificate error is that it is incorrect to receive "no shared cipher" when applying qq Group Anonymous Diffie-Hellman (ADH) optimization algorithm.

Analysis: in the default setting, Openssl does not enable the ADH optimization algorithm for security reasons. The optimization algorithm can be opened only if the customer does understand the negative effect of this optimization algorithm.

Method: in order to apply the qq Group Anonymous Diffie-Hellman (ADH) optimization algorithm, customers must apply the "- Dssl_ALLOW_ADH" option when compiling Openssl and add "ADH" to the sslCipherSuite command.

The fourth reason for SSL certificate error: the certificate of the platform website has expired or has not yet taken effect.

Analysis: this situation is usually due to the incorrect time of the computer operating system, that is to say, the certificate and its expiration date must be renewed.

Methods: you can query the reasonable start and end date of the information content of the certificate, make it clear whether the certificate is within the validity period, and whether the time on the computer is appropriate. Otherwise, because of the second category, the ssl certificate does not have a valid period, so you need to contact the manufacturer to renew the certificate as soon as possible.

SSL certificate error reason 5: the web page includes unsafe content.

Analysis: at this stage, we all advocate the application of HTTPS for every web page, then all the content of the platform website must be HTTPS. If you encounter photos, JS script production, FLASH software is enabled according to the HTTP method, it will produce this kind of incorrect. For example, the universal flash broadcasting software: codebase=' http://download.macromedia.com/pub/shockwave/

Cabs/flash/swflash.cab' .

Method: change the enabled element http to HTTPS, and then refresh to test whether the ssl problem has already been dealt with.

SSL certificate error reason 6: when browsing the web, it suddenly popped up that the ssl connection was incorrect

Methods:

1. Press and hold the "Win+R" keyboard shortcut to start the operation, and type: inetcpl.cpl click to clearly open the "internet option" in the operation box.

2. Switch to the menu bar

3. Enable "apply ssl 3.0"," apply ssl1.0 "," apply ssl 1.1", "apply ssl 1.2" in the setting box and click to be clear.

4. Restart the computer browser to deal with incorrect ssl connection!

On the SSL certificate will be wrong by what caused to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.