search

brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
17.06k stars 2.23k forks source link

Brave is not loading with self signed cert ERR_SSL_VERSION_OR_CIPHER_MISMATCH #13184

Open seguidor777 opened 3 years ago

seguidor777 commented 3 years ago

Hi,

I'm testing a web application in localhost, I've generated a self signed cert. I already have imported the CA certificate so it treats the site as secure. However, when I try to visit the site, I'm having this response:

This site can’t provide a secure connection
172.18.255.1 uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I think that the browser is not supporting the cipher from the certificate, it was generated with ECDSA and p521 curve. Please let me know if I am right and if you plan to support this feature. The site loads correctly with Firefox and curl.

Brave version: 1.16.76 Chromium: 86.0.4240.198 (Official Build) (64-bit).

cheesetosht commented 3 years ago

The issue must be with your self-cert file because I'm using it on my Linux as well as Windows system for react.js. I don't find any problem with it.

seguidor777 commented 3 years ago

Ok, thanks for helping me to check this. I'll double check my certs and will post my results once it's done

seguidor777 commented 3 years ago

Hi @thevrajshah, I just tested generating another cert with the same encryption and I got the same error. This is how I generated them

openssl ecparam -genkey -name secp521r1 -out server.key
openssl req -new -sha512 -key server.key -out server.csr
openssl req -x509 -sha512 -days 3650 -key server.key -in server.csr -out server.crt

Reference: https://github.com/seguidor777/nginxtls

If I open https://localhost:3000 on firefox or in curl with the insecure option the NGiNX page is shown correctly. I'm almost sure that the brave browser is not supporting the cipher that I'm using, because if I generate a RSA 2048 certificate instead EC p521, the page loads without problem.