作者iFEELing (ing)
看板SYSOP
標題Re: [問題] 電腦免登入網頁版ptt進不去
時間Tue Dec 8 11:45:06 2015
※ 引述《nocrazim8205 ()》之銘言：
: 大家好，小滷是常需要用電腦網頁版逛連結的鄉民
: 可是，昨天開始用chrome卻變成這樣
: http://i.imgur.com/SFq99Bp.jpg
: ie也會問出現這個，但還是會讓我看
: 但我常用chrome
: 想請問我該如何解決這問題?謝謝
新的憑證是 let's encrypt authority 簽的 自 2015年10月20日 06:33:36 生效
https://community.letsencrypt.org/t/which-browsers-and-operating-systems-support-lets-encrypt/4394
往下找 Known not to work
Blackberry OS 10, 7, & 6
Android 2.3.5 (HTC Wildfire S, Stock Browser)
Nintendo 3DS
Windows XP-pre SP3 - cannot handle SHA256 signed certificates
Windows XP SP3 - does not support SNI, is also problematic regarding supported ciphers and does not work with LE right now as Windows XP SP3 cannot handle certificates with namespace restrictions (see
https://community.letsencrypt.org/t/which-browsers-and-operating-systems-support-lets-encrypt/4394/10?u=mrtux and
https://github.com/letsencrypt/letsencrypt/issues/166016) - this affects Internet Explorer, Chrome, Safari and other software which uses the Windows CryptoAPI
如果是 XP SP3 的話
jshaLE Tech Advisor / Boulder engineer
Windows XP:
- Pre-SP3 will never work, because it lacks SHA2 support.
- SP3: Chrome and IE don't currently work because of the name constraints on our intermediate31. We're going to take a look at whether that's possible to work around in the long run, but for now it doesn't work.
- Firefox works because it has its own validation code.
試看看用 FireFox
--------
補充一下
XP SP3 在啟動 chrome 的時候 加上 --ignore-certificate-errors
chrome 會抱怨這種行為很危險 然後可以過
----
這樣類似把安全檢查關掉，要這樣做的話請考慮清楚並自負風險
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 140.128.153.200
※ 文章網址: https://webptt.com/m.aspx?n=bbs/SYSOP/M.1449546315.A.8B4.html
1F：→ iFEELing: XP SP3 + IE6 會過...Orz140.128.153.200 12/08 11:51
2F：→ c98406023: XP SP3 + IE8 會過...Orz 111.253.32.229 12/08 12:33
※ 編輯: iFEELing (140.128.153.200), 12/08/2015 14:14:34
3F：→ bestpika: IE: 我什麼都沒看到 (? 59.124.22.120 12/08 15:05
4F：→ ryohgi: 誰有更淺顯的說明嗎…我看不懂 )A( 36.235.9.169 12/08 16:31
5F：推 LPH66: XP SP3 對數位簽證的支援有些許問題 123.195.39.85 12/08 22:36
6F：→ LPH66: 若使用 Windows 的簽證檢查函式庫則不會過 123.195.39.85 12/08 22:37
7F：→ LPH66: Firefox 除外是因為他的簽證檢查是自己寫的 123.195.39.85 12/08 22:37
8F：→ LPH66: SP3 之前的則因為不支援 SHA256 所以沒轍 123.195.39.85 12/08 22:37
9F：推 nocrazim8205: 嗚嗚，謝謝你，我後來用火狐可以看 175.96.65.125 12/09 10:04
10F：→ nocrazim8205: ，但好可惜他不能複製分頁QQ 175.96.65.125 12/09 10:04
11F：→ minyann: 為了安全 已把在 chrome 指令碼移除 36.239.125.44 12/14 02:05