Uyixazulula Kanjani Ikhodi Yephutha: ssl_error_rx_record_too_long?

UJackson Gordon

Igcine ukubuyekezwa: Juni 18, 2025

Ikhaya > Kanjani > Uyixazulula Kanjani Ikhodi Yephutha: ssl_error_rx_record_too_long?

Okuqukethwe

Uma uphequlula iwebhusayithi futhi uhlangabezana nomlayezo wephutha “ssl_error_rx_record_too_long” , kungase kudide futhi kukhungathekise. Iphutha livamise ukuvela kuFirefox futhi likhomba ukwehluleka ngesikhathi sokuxhawula i-SSL/TLS phakathi kwesiphequluli sakho neseva. Ngamagama alula, isiphequluli besilindele impendulo evikelekile (ebethelwe), kodwa sathola enye into—imvamisa ngenxa yokungalungiswa kahle kweseva noma ukuphazamiseka kwenethiwekhi.

Lesi sihloko sizochaza ukuthi iphutha lisho ukuthini, kungani lenzeka, futhi okubaluleke kakhulu, ukuthi lingalungiswa kanjani.

1. Yini i-ssl_error_rx_record_too_long?

Iphutha ssl_error_rx_record_too_long iboshelwe ekubethelweni kwe-Secure Socket Layer (SSL), okuwubuchwepheshe obusetshenziswa ukusungula ukuxhumana okuphephile phakathi kwesiphequluli sewebhu neseva.

Uma ubona ikhodi ethi ssl_error_rx_record_too_long kuFirefox, ngokuvamile isho ukuthi:

Isiphequluli sizame ukusungula uxhumano oluvikelekile lwe-HTTPS.
Ithole impendulo ebingalindelekile noma engalungile ngesikhathi sokuxhawulana kwe-SSL/TLS.
Ngenxa yalokho, isiphequluli simise ukuxhumana ukuze sivikele idatha yakho.

Umlayezo Wephutha Ojwayelekile Uboniswa kuFirefox:

2. Izimbangela Ezivamile ze-ssl_error_rx_record_too_long

Ukungalungiseki kahle kweseva
Isizathu esivame kakhulu iseva yewebhu engalungiselelwanga kahle. Iseva kungenzeka isebenzisa i-HTTP esikhundleni se-HTTPS kumbobo 443, noma i-SSL/TLS ingase ingasethiwe ngendlela efanele.
Ukucushwa Kwembobo Okungalungile
I-HTTPS kufanele isebenze ku-port 443. Uma iseva ilungiselelwe ukuthi inikeze okuqukethwe kwe-HTTP kumbobo 443, isiphequluli sizodideka ngesikhathi sokuxhawula.
Izitifiketi ze-SSL ezingathenjwa noma ezizisayinele wena
Uma iwebhusayithi isebenzisa isitifiketi esisayinwe ngokungafanele noma ingekho nhlobo, leli phutha lingenzeka.
Isiphequluli Esiphelelwe yisikhathi
Kwesinye isikhathi, inguqulo yesiphequluli esiphelelwe yisikhathi ingase ingasekeli izimiso zesimanje ze-TLS ngendlela efanele.
I-Firewall noma Ukuphazamiseka kommeleli
Amanye ama-firewall noma ama-proxies angase aphazamise ithrafikhi ye-SSL, okuholela kumarekhodi angaphelele noma angalungile.

3. Ilungiswa kanjani Ikhodi Yephutha: ssl_error_rx_record_too_long?

3.1 Hlola Iwebhusayithi (Ukuhlola Kohlangothi Lweklayenti)

Uma uyisivakashi esihlangabezana naleli phutha:

Zama Esinye Isiphequluli: Vula isayithi elifanayo ku-Chrome noma i-Edge. Uma isebenza lapho, kuyinkinga eqondene neFirefox.
Sula inqolobane namakhukhi: Finyelela Izilungiselelo zeFirefox, qonda kokuthi Ubumfihlo Nokuphepha, bese usula yonke idatha ngaphansi kwesigaba samakhukhi kanye Nedatha Yesayithi.
Khubaza Izilungiselelo Zommeleli (Uma Zikhona): Kumenyu Yezilungiselelo zeFirefox, iya kokuthi Okujwayelekile > Izilungiselelo Zenethiwekhi > Izilungiselelo > Khetha "Awukho ummeleli" noma "Sebenzisa izilungiselelo zommeleli wesistimu" > Chofoza okuthi KULUNGILE ukuze ulondoloze.
Vala izandiso zenkampani yangaphandle: Ikakhulukazi ahlobene nama-VPN, ama-proxies, noma ukuhlunga kwe-HTTPS.
Khubaza okwesikhashana Ukuskena kwe-Antivirus SSL: Zulazulela kuzilungiselelo zesofthiwe yakho yesivikeli magciwane futhi ukhubaze isici sokuskena se-HTTPS ukuze uhlolele ukulungiswa.

3.2 Ngomnikazi Wewebhusayithi noma Umlawuli

Uma leli phutha lenzeka iseva yakho , inkinga kungenzeka ingenxa yokungalungiselelwa kahle. Landela lezi zinyathelo:

A. Qinisekisa ukuthi i-HTTPS Ilungiselelwe Ku-Port 443

Qinisekisa ukuthi iseva yakho yamukela uxhumo lwe-HTTPS ku-port 443 futhi imiswe kahle nge-SSL.

Ngokwesibonelo, on I-Apache :
qinisekisa ukuthi i-https ilungiselelwe ku-port 443 apache

Hlola ukuthi:

Kusetshenziswa imbobo elungile (443).
I-SSL ivuliwe ( SSLEngine on ).
Izindlela eziya esitifiketini nakumafayela angukhiye zivumelekile.

Ngoba Nginx , ibhulokhi yeseva elungile ibukeka kanje:
qinisekisa ukuthi i-https imisiwe ku-port 443 nginx

B. Faka Isitifiketi Esisebenzayo Se-SSL

Sebenzisa isitifiketi se-SSL esisayinwe ngokufanelekile yi-CA eyaziwayo, isibonelo, i-Let Encrypt, Sectigo, noma i-DigiCert.

Landela lezi zinyathelo ukuze ufake isitifiketi se-HTTPS esingenazindleko usebenzisa i-Let Encrypt:
I-sudo kufanele ifake i-certbot python3-certbot-nginx
sudo certbot -nginx

I-Certbot izomisa ngokuzenzakalelayo iseva yakho ye-Nginx/Apache ngesitifiketi esivumelekile.

C. Qala kabusha Iseva Yakho Yewebhu

Ngemva kokwenza izinguquko ekucushweni kwakho noma kokufaka isitifiketi esisha, qala kabusha iseva:

Nge-Apache: sudo systemctl qala kabusha i-apache2
Nge-Nginx: sudo systemctl qala kabusha nginx

3.3 Ukulungisa Okuthuthukile Namathiphu

A. Sebenzisa Izihloli ze-SSL eziku-inthanethi

Sebenzisa amathuluzi afana nalawa:

I-SSL Labs SSL Test
Kungani Kungekho I-Padlock

Lokhu kungasiza ukuxilonga ukuthi isitifiketi sakho sisethenjwa yini, siphelelwe yisikhathi, noma asilungiselelwe kahle.

B. Qinisekisa ukuthi Ayikho i-HTTP ku-Port 443

Uma iseva yakho iphendula ngombhalo osobala we-HTTP ku-port 443, isiphequluli sizobona lokhu njengerekhodi le-SSL elingalungile.

Sebenzisa curl ukuhlola: curl -v https://yourdomain.com

C. Hlola I-Firewall noma Ukucushwa Kwebhalansi Yokulayisha

Uma ungemuva kwesilinganisi somthwalo noma ummeleli (njenge-HAProxy noma i-Cloudflare), qiniseka ukuthi ilungiselelwe ukuphatha i-HTTPS kahle noma ukudlulisa ithrafikhi ye-SSL kuseva yakho yoqobo.

Qinisekisa ukuthi ukucushwa kwe-HAProxy kufaka phakathi ukubopha *:443 ssl crt /etc/ssl/private/mycert.pem ukuze uthole ukubopha okulungile kwe-SSL ku-port 443.

4. Isiphetho

I ssl_error_rx_record_too_long iphutha liwuphawu lokuthi kukhona okungahambi kahle ngoxhumo lwe-SSL/TLS—imvamisa inkinga yokumisa ohlangothini lweseva. Kungakhathaliseki ukuthi ungumsebenzisi ovamile noma umqondisi wewebhusayithi, izinyathelo ezichazwe kulesi sihloko zingakusiza ukukhomba futhi uxazulule inkinga.

Uma uvakashela isayithi nje, zama isiphequluli esihlukile, khubaza izandiso, noma hlola inethiwekhi yakho. Uma uphethe isayithi, hlola kabili izitifiketi zakho ze-SSL, izilungiselelo zeseva yewebhu, futhi uqinisekise ukuthi imbobo 443 ilungiselelwe ngendlela efanele i-HTTPS.

Ukuqonda ukuthi i-SSL/TLS isebenza kanjani kanye nokuqinisekisa ukuthi isetshenziswa ngendlela efanele kuzovimbela leli phutha futhi kunikeze abasebenzisi umuzwa wokuphequlula ophephile novikelekile.