Assume the following scenario:
- A web page is accessed using Google Chrome.
- The connection setup fails with the following error message:
This website cannot provide a secure connection test.intra.adcslabor.com has sent an invalid response. Try to run the Windows network diagnostics. ERR_SSL_PROTOCOL_ERROR
The error only occurs with Chrome. However, Internet Explorer, Firefox and Microsoft Edge (both the "Spartan" variant and the newer Chromium-based "Anaheim" variant) connect to the page without generating an error message.
Cause
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.
Chrome has been using HTTP over SSL (HTTPS) as its default protocol since the first release in 2021 (version 88.0.4324.190 for Windows, and 88.0.4324.192 for Mac).
The page accessed in this case was running on a non-standard port and did not have SSL enabled at all.
Therefore, the web server responded to the SSL Client Hello with HTTP error code 400 (Bad Request).
All other browsers fall back to HTTP and have therefore called the page correctly, but of course without the actually desired SSL encryption.
It is to be expected that Microsoft Edge will exhibit similar behavior in the near future.
Solution
The website should be switched to SSL. See also article "Manually requesting a web server certificate„.