事象
証明書情報を更新したサーバにアクセスすると以下文言でエラーとなり接続できない。
Your connection is not private Attackers might be trying to steal your information from xx (for example, passwords, messages, or credit cards). Learn more NET::ERR_CERT_AUTHORITY_INVALID
環境情報
- Version 96.0.4664.110 (Official Build) (64-bit)
解決策
GoogleChormeにて
chrome://net-internals/#hsts
を開き、以下の箇所に今回のドメイン名を入力してDelete処理を行う。
Delete domain security policies
Input a domain name to delete its dynamic domain security policies (HSTS and Expect-CT). (You cannot delete preloaded entries.)
以下、補足です。
補足
詳細なエラーメッセージは以下。
xx normally uses encryption to protect your information. When Chrome tried to connect to xx this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be xx, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.
You cannot visit xx right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
"website sent back unusual and incorrect credentials"という文言にある通り、証明書が変化したことをブラウザが検知して同エラーを返していると考え、ブラウザ側のキャッシュを消去することで対応しました。
以上。
