[GH-ISSUE #541] windows server 2008 r2 https firefox下无法访问 #418

New issue

Closed

opened 2026-05-05 12:14:42 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 12:14:42 -06:00

Owner

Originally created by @Kerwin1202 on GitHub (Nov 28, 2017).
Original GitHub issue: https://github.com/fatedier/frp/issues/541

Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly.
(为了节约时间，提高处理问题的效率，不按照格式填写的 issue 将会直接关闭。)

Use the commands below to provide key information from your environment:
You do NOT have to include this information if this is a FEATURE REQUEST

What version of frp are you using (./frpc -v or ./frps -v)?
frp_0.13.0_windows_386
server : windows server 2008 r2 sp1
client : windows server 2016

What operating system and processor architecture are you using (go env)?
运行在windows 2016上其中某https配置指向windows server 2008 r2上

Configures you used:

[kerwin_https]
type = https
local_ip = 192.168.1.199  #windows server 2008 r2机器 iis搭建的站点
local_port = 4432
subdomain = www

Steps to reproduce the issue:

其他配置都是普通的配置通过这配置访问对应的 https://www.kerwin.cn 在chrome和edge都没问题,然而在firefox (57.0) 会提示 连接到 www.kerwin.cn 时发生错误。在此 SSL 套接字上不允许重新协商。错误代码: SSL_ERROR_RENEGOTIATION_NOT_ALLOWED
，经测试在公网的一台windows server 2008 r2 sp1 机器搭建的https访问直接访问没问题，frp中转就不行，还测过在windows server 2016 iis搭建，然后frp中转也没问题。
怀疑是TLS加密协议导致的，修改了多次TLS加密协议也都无效

Originally created by @Kerwin1202 on GitHub (Nov 28, 2017). Original GitHub issue: https://github.com/fatedier/frp/issues/541 Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly. (为了节约时间，提高处理问题的效率，不按照格式填写的 issue 将会直接关闭。) Use the commands below to provide key information from your environment: You do NOT have to include this information if this is a FEATURE REQUEST **What version of frp are you using (./frpc -v or ./frps -v)?** frp_0.13.0_windows_386 server : windows server 2008 r2 sp1 client : windows server 2016 **What operating system and processor architecture are you using (`go env`)?** 运行在windows 2016上其中某https配置指向windows server 2008 r2上 **Configures you used:** ``` [kerwin_https] type = https local_ip = 192.168.1.199 #windows server 2008 r2机器 iis搭建的站点 local_port = 4432 subdomain = www ``` **Steps to reproduce the issue:** 1. 其他配置都是普通的配置通过这配置访问对应的 [https://www.kerwin.cn](https://www.kerwin.cn) 在chrome和edge都没问题,然而在firefox (57.0) 会提示 `连接到 www.kerwin.cn 时发生错误。在此 SSL 套接字上不允许重新协商。错误代码: SSL_ERROR_RENEGOTIATION_NOT_ALLOWED` ，经测试在公网的一台windows server 2008 r2 sp1 机器搭建的https访问直接访问没问题，frp中转就不行，还测过在windows server 2016 iis搭建，然后frp中转也没问题。怀疑是TLS加密协议导致的，修改了多次TLS加密协议也都无效