[GH-ISSUE #107] Chrome reporting ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY #59

Closed
opened 2026-02-25 22:32:30 +03:00 by kerem · 3 comments
Owner

Originally created by @x2rider on GitHub (Jan 8, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/107

A search on this error reports:
A deployment of HTTP/2 over TLS 1.2 SHOULD NOT use any of the cipher suites that are listed in the cipher suite black list.

I'm not sure how to change the cipher, or possibly the cipher order.

Is there something I can to do, to fix this?

Originally created by @x2rider on GitHub (Jan 8, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/107 A search on this error reports: A deployment of HTTP/2 over TLS 1.2 SHOULD NOT use any of the cipher suites that are listed in the cipher suite black list. I'm not sure how to change the cipher, or possibly the cipher order. Is there something I can to do, to fix this?
kerem 2026-02-25 22:32:30 +03:00
Author
Owner

@adamdecaf commented on GitHub (Jan 8, 2019):

What version of chrome are you using?

<!-- gh-comment-id:452353762 --> @adamdecaf commented on GitHub (Jan 8, 2019): What version of chrome are you using?
Author
Owner

@FiloSottile commented on GitHub (Jan 8, 2019):

This sounds almost certainly like an issue with the HTTPS server implementation you are using, not with the certificate mkcert generated. mkcert has no control over the cipher suites your TLS implementation uses.

If it works with any other certificate, please reopen the issue.

<!-- gh-comment-id:452375998 --> @FiloSottile commented on GitHub (Jan 8, 2019): This sounds almost certainly like an issue with the HTTPS server implementation you are using, not with the certificate mkcert generated. mkcert has no control over the cipher suites your TLS implementation uses. If it works with any other certificate, please reopen the issue.
Author
Owner

@x2rider commented on GitHub (Jan 11, 2019):

I was able to fix the issue I was having by running the IIS Crypto 2 tool
https://appuals.com/fix-err_spdy_inadequate_transport_security/

<!-- gh-comment-id:453652662 --> @x2rider commented on GitHub (Jan 11, 2019): I was able to fix the issue I was having by running the IIS Crypto 2 tool https://appuals.com/fix-err_spdy_inadequate_transport_security/
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/mkcert#59
No description provided.