TLS setting in Chrome vs IE - ERR_CONNECTION_RESET

user_2374421 0
Viewed 3098

I'm trying to connect to IIS (on WS2016 where TLS 1.2 is only available TLS version - the other ones are disabled).

  • Exploring with IE works fine
  • Exploring with Chrome (up to date) finishes with ERR_CONNECTION_RESET

I tried many configurations with Registry SCHANNEL / IE Options. Moreover Wireshark logs that:

  • IE makes Client Hello with TLSv1.2 - what works fine.
  • Chrome makes Client Hello with TLSv1 - what finishes with ERR_CONNECTION_RESET

Any idea what configuration force Chrome to use TLSv1 instead of configured TLSv1.2?

windows-server-2016 tls1.2 google-chrome
2 Answers

Are you using client certificates? Because your description sounds very similar to a problem I'm currently facing since Chrome updated from v81 to v83. I have no clue about the source of the problem yet but if I disable client certificates completely the problem disappears. I can reproduces the problem with a fresh installed Win Server 2019.

user_47594720

Enable TLS 1.2 in Google Chrome

Open Google Chrome.

Press Alt+F and select Settings.

Scroll down and select Show advanced settings.

Under the Network section, click Change proxy settings.

Click the Advanced tab.

Under the Security section, select the Use TLS 1.2 check box.

user_22387450
Related