{"id":4049,"date":"2022-01-01T18:50:00","date_gmt":"2022-01-01T11:50:00","guid":{"rendered":"https:\/\/blog.tinohost.com\/?p=4049"},"modified":"2022-01-15T19:39:58","modified_gmt":"2022-01-15T12:39:58","slug":"loi-ssl-handshake-failed-la-gi","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/loi-ssl-handshake-failed-la-gi\/","title":{"rendered":"L\u1ed7i “SSL handshake failed” l\u00e0 g\u00ec? H\u01b0\u1edbng d\u1eabn s\u1eeda l\u1ed7i chi ti\u1ebft"},"content":{"rendered":"\n

Trong qu\u00e1 tr\u00ecnh d\u00f9ng tr\u00ecnh duy\u1ec7t \u0111\u1ec3 v\u00e0o Internet hay x\u00e2y d\u1ef1ng Website, b\u1ea1n s\u1ebd c\u00f3 th\u1ec3 g\u1eb7p ph\u1ea3i c\u00e1c l\u1ed7i li\u00ean quan \u0111\u1ebfn SSL. V\u00e0 trong b\u00e0i vi\u1ebft n\u00e0y, ch\u00fang ta s\u1ebd c\u00f9ng nhau t\u00ecm hi\u1ec3u v\u1ec1 “L\u1ed7i “SSL handshake failed” l\u00e0 g\u00ec?”, c\u0169ng nh\u01b0 c\u00e1ch \u0111\u1ec3 s\u1eeda l\u1ed7i nh\u00e9!<\/strong><\/p>\n\n\n\n

T\u00ecm hi\u1ec3u v\u1ec1 l\u1ed7i “SSL handshake failed<\/strong>“<\/h2>\n\n\n\n

SSL l\u00e0 g\u00ec?<\/strong><\/h3>\n\n\n\n

SSL <\/strong>l\u00e0 vi\u1ebft t\u1eaft c\u1ee7a t\u1eeb Secure Sockets Layer<\/strong><\/a> (t\u1ea1m d\u1ecbch: \u201cl\u1edbp c\u00e1c c\u1ed5ng b\u1ea3o m\u1eadt\u201d<\/em> ). \u0110\u00e2y \u0111\u01b0\u1ee3c xem l\u00e0 ch\u1ee9ng ch\u1ec9 b\u1ea3o m\u1eadt, ti\u00eau chu\u1ea9n an ninh m\u1ea1ng \u0111\u01b0\u1ee3c c\u00f4ng nh\u1eadn tr\u00ean to\u00e0n c\u1ea7u. Th\u00f4ng qua vi\u1ec7c m\u00e3 h\u00f3a b\u1eb1ng c\u00e1ch t\u1ea1o ra m\u1ed9t li\u00ean k\u1ebft m\u00e3 h\u00f3a b\u1eb1ng c\u00f4ng ngh\u1ec7 cao gi\u1eefa m\u00e1y ch\u1ee7 l\u01b0u tr\u1eef web v\u00e0 tr\u00ecnh duy\u1ec7t, SSL \u0111\u1ea3m b\u1ea3o cho d\u1eef li\u1ec7u trao \u0111\u1ed5i gi\u1eefa m\u00e1y ch\u1ee7 web v\u00e0 tr\u00ecnh duy\u1ec7t lu\u00f4n \u0111\u01b0\u1ee3c an to\u00e0n.<\/p>\n\n\n\n

L\u1ed7i “SSL handshake failed” l\u00e0 g\u00ec?<\/strong><\/h3>\n\n\n\n

Handshake SSL\/TLS l\u00e0 qu\u00e1 tr\u00ecnh x\u00e1c nh\u1eadn v\u00e0 giao ti\u1ebfp gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7. Qu\u00e1 tr\u00ecnh n\u00e0y \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n th\u00f4ng qua \u0111\u01b0\u1eddng h\u1ea7m SSL \/ TLS an to\u00e0n. “C\u00e1i t\u00ean n\u00f3i l\u00ean t\u1ea5t c\u1ea3”. “Handshake” l\u00e0 c\u00e1i b\u1eaft tay – b\u01b0\u1edbc l\u00e0m quen x\u00e3 giao \u0111\u1ea7u ti\u00ean gi\u1eefa hai ng\u01b0\u1eddi xa l\u1ea1.

H\u1ec7 th\u1ed1ng m\u00e1y kh\u00e1ch – m\u00e1y ch\u1ee7 c\u0169ng t\u01b0\u01a1ng t\u1ef1 nh\u01b0 th\u1ebf. SSL handshake l\u00e0 x\u1ea3y ra khi hai b\u00ean \u2013 m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7 g\u1eb7p nhau l\u1ea7n \u0111\u1ea7u ti\u00ean. Vi\u1ec7c “b\u1eaft tay” bao g\u1ed3m m\u1ed9t s\u1ed1 b\u01b0\u1edbc: b\u1eaft \u0111\u1ea7u t\u1eeb vi\u1ec7c x\u00e1c th\u1ef1c danh t\u00ednh c\u1ee7a b\u00ean kia v\u00e0 k\u1ebft th\u00fac b\u1eb1ng vi\u1ec7c t\u1ea1o ra kh\u00f3a chung \u2013 kh\u00f3a b\u00ed m\u1eadt n\u1ebfu b\u1ea1n c\u00f3 th\u1ec3 g\u1ecdi n\u00f3.<\/p>\n\n\n\n

Hi\u1ec3u \u0111\u01a1n gi\u1ea3n, SSL handshake l\u00e0 cu\u1ed9c tr\u00f2 chuy\u1ec7n \u0111\u1ea7u ti\u00ean gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7. M\u1ee5c \u0111\u00edch c\u1ee7a cu\u1ed9c tr\u00f2 chuy\u1ec7n n\u00e0y l\u00e0 \u0111\u1ea3m b\u1ea3o qu\u00e1 tr\u00ecnh giao ti\u1ebfp di\u1ec5n ra su\u00f4n s\u1ebb v\u1edbi s\u1ef1 tr\u1ee3 gi\u00fap c\u1ee7a m\u00e3 h\u00f3a \u0111\u1ed1i x\u1ee9ng. Sau cu\u1ed9c “g\u1eb7p g\u1ee1” \u0111\u1ea7u ti\u00ean n\u00e0y, m\u1ed7i bit d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c truy\u1ec1n qua l\u1ea1i gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7 s\u1ebd \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. \u0110\u00e2y \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 qu\u00e1 tr\u00ecnh handshake SSL \/ TLS. L\u1ed7i “SSL handshake failed” th\u00f4ng b\u00e1o cho ng\u01b0\u1eddi d\u00f9ng bi\u1ebft \u0111\u01b0\u1ee3c: qu\u00e1 tr\u00ecnh k\u1ebft n\u1ed1i gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7 kh\u00f4ng th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n

\"loi-ssl-handshake-failed-la-gi\"<\/figure><\/div>\n\n\n\n

Nguy\u00ean nh\u00e2n v\u00e0 c\u00e1ch kh\u1eafc ph\u1ee5c l\u1ed7i “SSL handshake failed<\/strong>“<\/h2>\n\n\n\n

Th\u1eddi gian h\u1ec7 th\u1ed1ng kh\u00f4ng ch\u00ednh x\u00e1c<\/strong><\/h3>\n\n\n\n

Nguy\u00ean nh\u00e2n:<\/strong> Thi\u1ebft b\u1ecb b\u00ean ph\u00eda ng\u01b0\u1eddi d\u00f9ng c\u00f3 ng\u00e0y v\u00e0 gi\u1edd kh\u00f4ng ch\u00ednh x\u00e1c. \u0110\u00e2y l\u00e0 l\u1ed7i t\u1eeb ph\u00eda m\u00e1y kh\u00e1ch.
H\u1ea7u h\u1ebft c\u00e1c ch\u1ee9ng ch\u1ec9 SSL \/ TLS<\/a> c\u00f3 th\u1eddi h\u1ea1n. N\u1ebfu qua th\u1eddi h\u1ea1n n\u00e0y, ch\u1ee9ng ch\u1ec9 s\u1ebd kh\u00f4ng ho\u1ea1t \u0111\u1ed9ng v\u00e0 kh\u00f4ng c\u00f2n gi\u00e1 tr\u1ecb. Nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng c\u1ed1 t\u00ecnh \u0111\u1eb7t th\u1eddi gian tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a h\u1ecd tr\u1edf v\u1ec1 tr\u01b0\u1edbc ng\u00e0y h\u1ebft h\u1ea1n \u0111\u1ec3 h\u1ecd v\u1eabn c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i.<\/p>\n\n\n\n

Kh\u1eafc ph\u1ee5c:<\/strong> B\u1ea1n ch\u1ec9 c\u1ea7n \u0111i\u1ec1u ch\u1ec9nh gi\u1edd tr\u00ean thi\u1ebft b\u1ecb \u0111\u00fang v\u1edbi gi\u1edd th\u1ef1c t\u1ebf.<\/p>\n\n\n\n

Man-in-the-Middle<\/strong><\/h3>\n\n\n\n

Nguy\u00ean nh\u00e2n:<\/strong> M\u1ed9t b\u00ean th\u1ee9 ba \u0111ang ch\u1eb7n thao t\u00e1c k\u1ebft n\u1ed1i. \u0110\u00e2y l\u00e0 l\u1ed7i c\u00f3 th\u1ec3 \u0111\u1ebfn t\u1eeb c\u1ea3 hai ph\u00eda.

M\u1ed9t hacker n\u00e0o \u0111\u00f3 \u0111ang c\u1ed1 l\u1ea5y c\u1eafp th\u00f4ng tin ho\u1eb7c g\u00e2y h\u1ea1i h\u1ec7 th\u1ed1ng. Ho\u1eb7c ng\u01b0\u1eddi d\u00f9ng \u0111ang m\u1edf m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh v\u00e0 thi\u1ebft b\u1ecb ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ec3 ki\u1ec3m tra, c\u00e2n b\u1eb1ng t\u1ea3i, …<\/p>\n\n\n\n

Kh\u1eafc ph\u1ee5c: <\/strong>N\u1ebfu l\u1ed7i \u0111\u1ebfn t\u1eeb m\u00e1y kh\u00e1ch, b\u1ea1n n\u00ean \u0111\u01b0a v\u00e0o danh s\u00e1ch tr\u1eafng ho\u1eb7c t\u1ea1o ngo\u1ea1i l\u1ec7 cho trang web mu\u1ed1n truy c\u1eadp. Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng t\u1eaft t\u01b0\u1eddng l\u1eeda, ph\u1ea7n m\u1ec1m di\u1ec7t virus ch\u1ec9 \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi m\u1ed9t trang web n\u00e0o \u0111\u1ea5y. Ng\u01b0\u1ee3c l\u1ea1i, n\u1ebfu l\u1ed7i t\u1eeb m\u00e1y ch\u1ee7, h\u1ec7 th\u1ed1ng n\u00ean xem l\u1ea1i c\u1ea5u h\u00ecnh tr\u00ean thi\u1ebft b\u1ecb c\u1ea1nh.<\/p>\n\n\n\n

\"loi-ssl-handshake-failed-la-gi\"<\/figure><\/div>\n\n\n\n

L\u1ed7i tr\u00ecnh duy\u1ec7t<\/strong><\/h3>\n\n\n\n

Nguy\u00ean nh\u00e2n:<\/strong> C\u1ea5u h\u00ecnh tr\u00ecnh duy\u1ec7t \u0111ang g\u00e2y ra l\u1ed7i. \u0110\u00e2y l\u00e0 l\u1ed7i t\u1eeb ph\u00eda m\u00e1y kh\u00e1ch.
C\u00f3 th\u1ec3 tr\u00ecnh duy\u1ec7t c\u1ee7a b\u1ea1n b\u1ecb \u0111\u1ecbnh c\u1ea5u h\u00ecnh sai, \u1ea3nh h\u01b0\u1edfng c\u1ee7a plugin, … d\u1eabn \u0111\u1ebfn vi\u1ec7c x\u1ea3y ra s\u1ef1 c\u1ed1 khi k\u1ebft n\u1ed1i v\u1edbi c\u00e1c trang web h\u1ee3p ph\u00e1p kh\u00e1c.<\/p>\n\n\n\n

Kh\u1eafc ph\u1ee5c:<\/strong> B\u1ea1n \u0111\u1eb7t l\u1ea1i tr\u00ecnh duy\u1ec7t c\u1ee7a b\u1ea1n v\u1ec1 c\u00e0i \u0111\u1eb7t m\u1eb7c \u0111\u1ecbnh v\u00e0 t\u1eaft t\u1ea5t c\u1ea3 plugin. Ho\u1eb7c b\u1ea1n c\u00f3 th\u1ec3 th\u1eed chuy\u1ec3n t\u1eeb Google Chrome sang tr\u00ecnh duy\u1ec7t g\u1ed1c c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh (Apple Safari, Microsoft Edge<\/a>, …) ho\u1eb7c th\u1eed tr\u00ean Mozilla Firefox.<\/p>\n\n\n\n

Giao th\u1ee9c kh\u00f4ng kh\u1edbp<\/strong><\/h3>\n\n\n\n

Nguy\u00ean nh\u00e2n:<\/strong> Giao th\u1ee9c ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng kh\u00f4ng \u0111\u01b0\u1ee3c m\u00e1y ch\u1ee7 h\u1ed7 tr\u1ee3. \u0110\u00e2y l\u00e0 l\u1ed7i t\u1eeb c\u1ea3 hai ph\u00eda.
L\u00fac n\u00e0y, m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7 kh\u00f4ng c\u00f3 h\u1ed7 tr\u1ee3 l\u1eabn nhau cho c\u00f9ng m\u1ed9t phi\u00ean b\u1ea3n TLS. V\u00ed d\u1ee5: Trong khi m\u00e1y kh\u00e1ch h\u1ed7 tr\u1ee3 TLS 1.0, TLS 1.1 th\u00ec m\u00e1y ch\u1ee7 h\u1ed7 tr\u1ee3 TLS 1.2. Tr\u01b0\u1eddng h\u1ee3p n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c kh\u1eafc ph\u1ee5c<\/strong> nh\u01b0 sau:<\/p>\n\n\n\n