简体   繁体   English

SSL错误:安全连接失败

[英]SSL error : Secure Connection Failed

I purchased a SSL certificate that will expire in 2019 , Then I installed it and now it's doing well on Chrome and showing green Padlock. 我购买了将于2019年到期的SSL证书,然后安装了它,现在它在Chrome上运行良好,并显示绿色的Padlock。

But on Mozilla Firefox, I get an error: 但是在Mozilla Firefox上,出现错误:

Secure Connection Failed

An error occurred during a connection. Peer’s Certificate has been revoked.
Error code: SEC_ERROR_REVOKED_CERTIFICATE

I searched for an answer and viewed some questions about it here , But didn't find a solution. 我在这里搜索了答案,并查看了一些有关此问题的信息,但没有找到解决方案。

What is the problem and how to fix it? 有什么问题以及如何解决?

How is it possible to be secured on a browser and not on another? 如何在浏览器而不是其他浏览器上进行保护?

Website : https://masteryourlifepower.com 网址: https : //masteryourlifepower.com

Website : https://masteryourlifepower.com 网址: https : //masteryourlifepower.com

The report from SSLLabs clearly shows that the certificate was revoked, thus Firefox is complaining correctly: SSLLabs报告清楚地表明该证书已被吊销,因此Firefox正确地抱怨道:

Revocation status   Revoked   INSECURE

How is it possible to be secured on a browser and not on another? 如何在浏览器而不是其他浏览器上进行保护?

Browser check in different ways for revocation or might check not at all. 浏览器以不同的方式检查撤销,或者根本不检查。 The old was was to use CRL which did not scale. 过去是使用无法扩展的CRL The modern way is to use OCSP which requires the OCSP server of the CA to be always reachable and also might slow down the connection establishment unless OCSP stapling is used. 现代方法是使用OCSP ,这要求CA的OCSP服务器始终可访问,并且除非使用OCSP装订,否则还可能减慢连接的建立。 Therefore Chrome uses CRLSets which contains only the revoked certificates Google considers relevant. 因此,Chrome使用的CRLSets仅包含Google认为相关的吊销证书。

In your specific case the certificate is revoked. 在您的特定情况下,证书被吊销。 Firefox probably used OCSP to check for it and successfully detected the revocation. Firefox可能使用OCSP进行了检查并成功检测到吊销。 Chrome used CRLSets and since your site was not deemed important enough Google did not include the revocation into the CRLSets and thus the revocation was not detected. Chrome浏览器使用了CRLSets,并且由于您的网站不那么重要,因此Google并未将撤销内容包含在CRLSets中,因此未检测到该撤销内容。

I was lifting Wordpress backup and got this line "Secure Connection Failed". 我取消了Wordpress备份,并得到以下行“安全连接失败”。 These errors were due to plugins requiring SSL certificates such as Google analytics. 这些错误是由于需要SSL证书的插件(例如Google Analytics(分析))引起的。 after removing the plug-ins, everything worked. 删除插件后,一切正常。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM