0

I'm using: Huawei Nexus 6p with Android 7.1.1 and latest stable version of Google Chrome Browser, and whenever I'm trying to access my website and I'm getting:

Your connection is not private (see screenshot)

I removed my website name out of screenshot(s):

Please advise.

Improve this question
4
  • Are you sure that this isn't a website releated problem?
    – Једноруки Крстивоје
    Commented Jan 3, 2017 at 18:13
  • @ЈеднорукиКрстивоје it most likely is, but it could be a device/software problem as well (missing CA certs pre-installed by the vendor).
    – GiantTree
    Commented Jan 3, 2017 at 18:24
  • 1
    @ЈеднорукиКрстивоје yes, as I'm able to access it from other devices without any issues.
    – alexus
    Commented Jan 3, 2017 at 19:44
  • @GiantTree nothing is missing (CA certs are included) and SSL works properly from desktop and other devices as well.
    – alexus
    Commented Jan 3, 2017 at 19:45

2 Answers 2

Reset to default
1

I was able to address my issue with following steps:

Improve this answer
0

This may or may not be an issue on your side:
Make sure you are not using a proxy, VPN or any other kind of traffic redirection.

Inform the owner of the website that because of HSTS, you are not able to visit his website.
He needs to configure a trusted SSL certificate that is neither self-signed, nor expired (read as: You can't connect via plain HTTP for the next year, until the HSTS entry on your device expires. This implies that the site in question was not added to the HSTS preload lists of any browser vendor).

The error you presented implies an untrusted certificate chain, with the certificate used by the Certificate Authority not being trusted.
This could be because of a private certificate authority (often used for VPNs to revoke certificates) or an outdated system configuration (CA certs are updated regularly, CAs like Let's Encrypt are very young and switch their CA certificates/add new ones once they are approved).

If you are the web admin: Configure your Web Server to serve HTTPS requests with a valid certificate.

Improve this answer
5
  • 1
    I'm an admin) SSL is configured (with valid certificate) and even though I took out HSTS configuration, I'm still experiencing an error.
    – alexus
    Commented Jan 3, 2017 at 19:42
  • @alexus you can't take out HSTS. HSTS is enforced for a long time (configurable, should be at least 6 months) and a client won't connect to a server without HSTS (or even HTTPS). Basically: Once HSTS is enabled, you can't disable it.
    – GiantTree
    Commented Jan 3, 2017 at 20:01
  • sure you can) just follow my answer I just did it (without waiting for 6 month).
    – alexus
    Commented Jan 3, 2017 at 20:03
  • Now tell all your visitors prior to the removal to do this.
    – GiantTree
    Commented Jan 3, 2017 at 20:03
  • this is private website and my users are numbered (so that's not an issue), however I do see what you're saying..
    – alexus
    Commented Jan 3, 2017 at 20:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .