Google Chrome ERR_SSL_SERVER_CERT_BAD_FORMAT
如下图
这个网站无法提供安全连线
https://www.ublink.org
不符合安全性标準
无法点选进阶
或是下一步
继续前往
不购买 CA 授权
解决方法如下
如果有安装 NOD32
原文连结
https://support.eset.com/kb3126/?locale=en_US&viewlocale=en_US
说明节录如下
HTTPS websites fail to load or you receive the error message "Connection is untrusted" when using your web browser with ESET products
Applies to: ESET Smart Security Premium, ESET Endpoint Products, ESET Smart Security
Issue
Websites with SSL Certificates are not accessibleYou receive the error message: "sec_error_reused_issuer_and_serial"Root certificate not imported correctly
Solution
In some cases, the root certificate is not properly imported during the installation of ESET products. This issue is often resolved by disabling and then re-enabling SSL scanning. To do so, please follow the steps below:
Open your ESET product. How do I open my ESET product? Press F5 to enter Advanced setup. Click Web and email, expand SSL/TLS, click the slider bar next to Enable SSL/TLS protocol filtering to disable and then click OK.Version 8.x and earlier: Expand Web and email → Protocol filtering, click SSL, select Do not scan SSL protocol and then click OK.Figure 1-1Click the image to view larger in new windowPress F5 to enter Advanced setup. Click Web and email, expand SSL/TLS, click the slider bar next to Enable SSL/TLS protocol filtering to re-enable and then click OK.Version 8.x and earlier: Expand Web and email → Protocol filtering, click SSL, select Always scan SSL protocol and then click OK.Figure 1-2Click the image to view larger in new windowRestart your computer.
You should now be able to access web pages that use SSL certificates without interference. If the issue persists, you can temporarily disable SSL protocol scanning to continue browsing without interruption. Proceed to the next section for step-by-step instructions.
Disable SSL protocol scanning:
Potential security risk
Disabling SSL scanning will remove a layer of security provided by ESET Smart Security and could expose your system to security risks.
Open your ESET product. How do I open my ESET product? Press F5 to enter Advanced setup. Click Web and email, expand SSL/TLS, click the slider bar next to Enable SSL/TLS protocol filtering and then click OK.Version 8.x and earlier: Expand Web and email → Protocol filtering, click SSL, select Do not scan SSL protocol and then click OK.Figure 2-1Click the image to view larger in new window
You should now be able to access web pages that use SSL certificates without interference. If the issue persists, you can temporarily disable the addition of root certificate to known browsers. Proceed to the next section for step-by-step instructions.
Temporarily disable root certificate
Open your ESET product. How do I open my ESET product? Press F5 to enter Advanced setup. Click Web and email, expand SSL/TLS, click the slider bar next to Add the root certificate to known browsers and then click OK.Figure 3-1Click the image to view larger in new windowOpen your browser and reload the page you were attempting to access. Open your ESET product. How do I open my ESET product? Press F5 to enter Advanced setup. Click Web and email, expand SSL/TLS, click the slider bar next to Add the root certificate to known browsers and then click OK.Figure 3-2Click the image to view larger in new windowRestart your computer.
If you are still unable to resolve your issue, please email ESET Technical Support.
https://help.eset.com/eav/9/zh-TW/index.html?idh_config_epfw_ssl_known.htm
已知的凭证清单
[已知的凭证清单] 可用于为特定的 SSL 凭证自订 ESET NOD32 Antivirus 行为,且若在 [SSL/TLS 通讯协定过滤模式] 中选取 [互动模式],则可记住选择的处理方法。您可于[进阶设定] (F5) > [Web 和电子邮件] > [SSL/TLS] > [已知的凭证清单] 中检视与编辑清单。
[已知的凭证清单] 视窗包含:
直栏
名称 - 凭证名称。
凭证发行者 - 凭证建立者名称。
凭证主旨 - 主旨栏位可识别与主旨公用金钥栏位中所储存公用金钥相关联的实体。
存取 - 选取作为 [存取处理方法] 的 [允许] 或 [封锁] 以允许/封锁凭证认为安全的通讯,无论凭证的可信任度为何。选取 [自动] 以允许信任的凭证并要求不信任的凭证。选取 [询问] 以一律询问使用者处理方法。
扫描 - 选取作为 [扫描处理方法] 的 [扫描] 或 [略过] ,以扫描或忽略此凭证认为安全的通讯。选取 [自动] 以于自动模式中扫描并于互动模式中询问。选取 [询问] 以一律询问使用者处理方法。
控制项元素
[新增] - 新增新凭证并调整关于存取和扫描选项的设定。
编辑 - 选取您想配置的凭证并按一下 [编辑]。
移除 - 选取您想删除的凭证并按一下 [移除]。
确定/取消 - 若您想储存变更,请按一下 [确定],或若您想离开而不储存,请按一下 [取消]。
解法如上