Specific components in the latest SSL certs will simply stop working. Older operating systems fall out of date with newer technologies such as TLS 1.3 and the latest cipher suites as browsers stop supporting them. Click here to download the The 2020 Guide to Managing 40+ WordPress Sites! Use a New Operating System We’ve taken our knowledge of effective website management at scale, and turned it into an ebook and video course.
If you are on a Mac, see these instructions on how to delete an SSL certificate. If it is old, reach out to your host and ask them to update their TLS version. Under configuration, it will show you the current version of TLS running on the server with that certificate. This is something the SSL Labs tool can also help with. (Suggested reading: if you’re using legacy TLS versions, you might want to fix ERR_SSL_OBSOLETE_VERSION Notifications in Chrome). Cloudflare also enables TLS 1.3 by default. Kinsta supports TLS 1.3 on all of our servers and our Kinsta CDN. If you are a Kinsta customer you never have to worry about this as we always upgrade our servers to the latest and greatest supported versions. Ideally, it should be running at least TLS 1.2 (better yet, TLS 1.3). Check for Old TLS versionĪnother possible reason is that the TLS version running on the web server is old. That is where a tool like SSL Labs can come in handy. However, in our case, the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error actually prevented us from being able to check it in Chrome DevTools. Remember though, there are wildcard certificates and other variations, but for a typical site, it should match exactly. It could take a minute or two to scan your site’s SSL/TLS configuration on your web server. You can also select the option to hide public results if you prefer. It is very reliable and we use it for all Kinsta clients when verifying certificates. Simply input your domain into the Hostname field and click on “Submit.”
If you see this error, the first and easiest place to start is to perform an SSL check on the certificate that is installed on the site. We recommend using the free SSL check tool from Qualys SSL Labs.
0 kommentar(er)
