Fix ERR_SSL_OBSOLETE_CIPHER on Chrome
Quick Answer: The ERR_SSL_OBSOLETE_CIPHER error indicates Chrome encountered a website using an SSL/TLS cipher suite or protocol version deemed insecure or deprecated. The most likely cause is an outdated server configuration. First, ensure your Chrome browser and operating system are fully updated. Then, check the website's SSL certificate details via Chrome's developer tools (Security tab) to identify the specific obsolete cipher. This should resolve the client-side issue or confirm a server-side configuration problem.
What Causes This Error
- Website server configured with outdated or weak SSL/TLS cipher suites (e.g., RC4, 3DES, MD5-based ciphers) that Chrome no longer trusts for security reasons.
- The website's server is only supporting deprecated TLS protocol versions (e.g., TLS 1.0, TLS 1.1) which Chrome has started to phase out or block by default.
- Client-side interference from security software (antivirus, firewall) performing SSL inspection, which might be using an older TLS stack or injecting an untrusted certificate.
- Outdated operating system or Chrome browser version that lacks support for modern TLS 1.2/1.3 cipher suites, or has not received security updates to distrust obsolete ones.
- Misconfigured network proxy or VPN service that intercepts and re-encrypts traffic using an older, weaker SSL/TLS configuration.
Step-by-Step Fixes
Fix 1: Update Chrome and Operating System
Open Chrome, navigate to `chrome://settings/help`, and allow Chrome to check for and install any available updates. Relaunch Chrome.,For Windows: Go to `Settings > Update & Security > Windows Update` and install all pending updates. Restart your computer.,For macOS: Go to `System Settings > General > Software Update` and install any available macOS updates. Restart your computer.,For Linux: Use your distribution's package manager (e.g., `sudo apt update && sudo apt upgrade` for Debian/Ubuntu) to update your system and Chrome.
Fix 2: Temporarily Disable Antivirus/Firewall SSL Inspection
Identify your installed antivirus or internet security suite (e.g., Avast, Kaspersky, ESET, Bitdefender).,Access its settings and locate features like 'SSL/TLS scanning', 'HTTPS inspection', 'Web Shield', or 'Encrypted connection scanning'.,Temporarily disable this feature. Attempt to access the website. If it loads, re-enable the feature and look for an exclusion or update option for the security software.,If the issue persists, consider adding an exception for Chrome or the specific website in your firewall settings.
Fix 3: Clear Browser Cache and DNS Cache
In Chrome, press `Ctrl+Shift+Delete` (Windows/Linux) or `Cmd+Shift+Delete` (macOS) to open the 'Clear browsing data' dialog.,Select 'All time' for the time range. Check 'Cached images and files' and 'Cookies and other site data'. Click 'Clear data'.,Open Command Prompt (Admin) or Terminal. For Windows, run `ipconfig /flushdns`. For macOS/Linux, run `sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder`.,Relaunch Chrome and try accessing the website again.
Fix 4: Check Website's SSL/TLS Configuration (Server-Side)
Use an online SSL server test tool like Qualys SSL Labs (www.ssllabs.com/ssltest/) to analyze the website's domain.,Review the 'Configuration' section for supported protocol versions (TLS 1.0, 1.1, 1.2, 1.3) and the 'Cipher Suites' section for any weak or deprecated ciphers.,If the report indicates obsolete protocols or ciphers (e.g., TLS 1.0/1.1 only, RC4, 3DES, MD5-based ciphers), contact the website administrator or hosting provider.,Inform them about the `ERR_SSL_OBSOLETE_CIPHER` error and the need to update their server's SSL/TLS configuration to support modern protocols (TLS 1.2/1.3) and strong cipher suites.
Advanced Fixes
Advanced Fix 1: Investigate Enterprise Proxy/Firewall Interception
In an enterprise environment, network proxies or firewalls often perform SSL/TLS interception. Check your organization's IT policies or contact your network administrator.,Verify if the interception device is using an outdated TLS stack or re-issuing certificates with weaker ciphers. This might require updating the proxy's firmware or configuration.,Ensure that the root certificate of the interception device is correctly installed and trusted in your Chrome browser's certificate store and your operating system's trust store.
FAQs
Q: What specifically makes a cipher 'obsolete' in Chrome's view?
A: Chrome considers a cipher obsolete if it has known cryptographic vulnerabilities (e.g., RC4, 3DES), uses outdated hashing algorithms (e.g., MD5 for signatures), or is part of an older TLS protocol version (TLS 1.0/1.1) that lacks modern security features like perfect forward secrecy by default. Google consistently updates its security policies based on evolving cryptographic best practices and threat landscapes.
Q: Can I force Chrome to accept obsolete ciphers or protocols?
A: While technically possible via command-line flags (e.g., `--ssl-version-min=tls1`), it is strongly discouraged as it significantly compromises your security and exposes you to known vulnerabilities. This should only be used in controlled, isolated environments for testing legacy systems, never for general browsing. Chrome's default behavior is designed to protect users from these risks.
Q: Why does this error appear for some websites but not others?
A: This error is specific to the server's SSL/TLS configuration. Modern websites and services regularly update their configurations to use TLS 1.2 or 1.3 with strong cipher suites. Older or poorly maintained websites, internal corporate applications, or legacy hardware might still be using deprecated protocols or ciphers, triggering this error when accessed by a modern, security-conscious browser like Chrome.
Q: Does this error mean my own computer is insecure?
A: Not necessarily. The error primarily points to a security weakness on the website's server. However, if your operating system or Chrome browser is severely outdated, it might contribute to the issue by not supporting modern TLS versions or having outdated trust stores. Ensuring your client-side software is updated is crucial for maintaining a secure browsing environment.