Common SSL Protocol Errors
This often indicates SSL/TLS configuration issues.
Fix 1: Check SSL Certificate Validity
# Check expiration
echo | openssl s_client -servername your-domain.com -connect your-domain.com:443 2>/dev/null | openssl x509 -noout -dates
Renew if expired.
Fix 2: Check Nginx SSL Configuration
Ensure SSL is properly configured:
# In your site config
listen 443 ssl http2;
ssl_certificate /path/to/fullchain.pem;
ssl_certificate_key /path/to/privkey.pem;
Test config:
sudo nginx -t
sudo systemctl reload nginx
Fix 3: Update SSL Protocols and Ciphers
Use modern, secure settings:
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
ssl_prefer_server_ciphers off;
Fix 4: Check Server Date and Time
Wrong system time breaks SSL:
date
# If wrong, sync time
sudo timedatectl set-ntp true
sudo systemctl restart ntp
Fix 5: Check Certificate Chain
# Verify full chain
openssl s_client -connect your-domain.com:443 -showcerts
Ensure intermediate certificates are included.
Fix 6: Clear Browser SSL State
Chrome: Settings → Privacy → Clear browsing data → Cached images and files.
Fix 7: Check for Mixed Content Warnings
While not directly causing ERR_SSL_PROTOCOL_ERROR, mixed content can trigger SSL issues.