搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

Learn More

TLS Chain issues but trusted?

more options

I have checked one website to check if there is an Problem, and there was it. Why is this site TRUSTED? may I know it?

here is a tested site link of it : https://www.ssllabs.com/ssltest/analyze.html?d=neis.go.kr

I have checked one website to check if there is an Problem, and there was it. Why is this site TRUSTED? may I know it? here is a tested site link of it : https://www.ssllabs.com/ssltest/analyze.html?d=neis.go.kr

被選擇的解決方法

Hi SJang, that server obviously has a lot of problems with its configuration.

The chain issue mentioned on SSLLabs is that the site sends an extra certificate that is not required to verify its site certificate. That happens on a lot site (I've made that mistake myself with a Comodo bundle file) and as far as I can tell, that does not invalidate the certificate for any browser.

Firefox is able to find agreement on TLS 1.2 and a cipher that both the server and Firefox support, and therefore is able to make a secure connection even though the server allows weaker connections.

從原來的回覆中察看解決方案 👍 1

所有回覆 (1)

more options

選擇的解決方法

Hi SJang, that server obviously has a lot of problems with its configuration.

The chain issue mentioned on SSLLabs is that the site sends an extra certificate that is not required to verify its site certificate. That happens on a lot site (I've made that mistake myself with a Comodo bundle file) and as far as I can tell, that does not invalidate the certificate for any browser.

Firefox is able to find agreement on TLS 1.2 and a cipher that both the server and Firefox support, and therefore is able to make a secure connection even though the server allows weaker connections.