TLS ama Badbaadada lakabka Gaadiidka^{(Transport Layer Security)} waa borotokool sir ah. Waxaa loo qaabeeyey in xidhiidhka TLS uu ahaado mid ammaan ah oo gaar ah. Maqaalkan, waxaan ku sharixi doonaa waxa TLS gacan qaadku yahay iyo sida loo hagaajiyo gacan-qaadka TLS haddii aad la kulanto arrimo.

Kahor intaanan horay usii socon oo aan ka hadal gacanqaadka TLS , aynu fahano marka TLS dhacdo. Mar kasta oo aad gasho degel ama codsi HTTPS ah , TLS ayaa la isticmaalaa. Markaad gasho iimaylo, fariimo, iyo xataa VOIP , waxay isticmaashaa TLS . Waa inaad ogaataa in HTTPS ay tahay hirgelinta sirta TLS .

Waa maxay gacan qaadka TLS

Gacan qaadku waa nooc ka mid ah gorgortanka labada daraf. Sida^(Just) marka aan dadka la kulanno, aan is gacan qaadno, ka dibna wax kasta oo kale horay u sii wadno. Xariiqyada la midka ah, gacan qaadka TLS waa nooc ka mid ah qirashada u dhaxaysa laba adeegayaal.

Inta lagu jiro gacan-qaadka TLS , adeegayaashu way is hubiyaan oo dejiyaan sir, iyo sidoo kale furayaasha isweydaarsadaan. Haddii wax walba ay yihiin kuwo dhab ah, iyo sida la filayo, xog badan oo xog-isweydaarsi ah ayaa dhici doona. Waxaa jira afar tallaabo oo waaweyn:

1. Sheeg^(Specify) nooca TLS ee loo isticmaali doono isgaarsiinta.
2. Dooro^(Choose) algorithms-ka sireed ee la isticmaali doono
3. Xaqiijinta waxaa lagu xaqiijiyaa iyadoo la adeegsanayo furaha dadweynaha iyo saxiixa dhijitaalka ah ee maamulka shahaadada SSL
4. Furayaasha kulanka waa la soo saaray oo la isweydaarsaday

Erayga caadiga ah, marka hore waxay yiraahdaan hello, ka dib server-ku wuxuu bixiyaa shahaado uu macmiilku u baahan yahay inuu xaqiijiyo. Marka xaqiijinta la dhammeeyo, fadhi ayaa la soo saarayaa. Fure ayaa la abuuray iyadoo xogta la isku weydaarsanayo fadhiga.

Akhri^(Read) : Farqiga u dhexeeya TLS iyo hababka sirta SSL .

Sida loo hagaajiyo gacan qaadka TLS

Waxba ma samayn kartid haddii ay jirto arrin dhinaca server-ka ah - laakiin dhibaato ayaa kaa haysata browserka, waa la hagaajin karaa. Tusaale ahaan, haddii server-ku bixiyo shahaado aan la xaqiijin karin, markaa waxba kama qaban kartid. Si kastaba ha noqotee, haddii dhibaatadu tahay is-waafajin la'aanta borotokoolka TLS , markaa waxaad ka beddeli kartaa browserka.

1. Hubi in wakhtiga nidaamku sax yahay
2. Hubi nin ku jira^{(Man in the middle)} dhibaatada dhexe
3. Ku beddel borotokoolka TLS Windows
4. Tirtir Profile Browser^{(Delete Browser Profile)} ama Xogta Shahaadada^{(Certificate Database)}
5. Dib u deji browserka

Waxaa jira sababo badan oo badan oo sababta gacan-qaadka TLS uu u fashilmi karo, waxayna kuxirantahay dhacdada. Markaa halkan siyaabo dhowr ah oo lagu hagaajin karo TLS , laakiin ka hor, had iyo jeer isticmaal xeerarkan si aad u shaandheyso dhibaatada.

• Ka hubi goobo kala duwan, iyo haddii dhibaatadu weli jirto.
• U beddel isku xirka shabakado badan, ie, WiFi ama Wired
• Beddel^(Change) shabakada, ie, ku xidh hotspot moobaylka ama router ka duwan ama xitaa isku day shabakad dadweyne

1] Hubi^(Check) in wakhtiga nidaamku sax yahay

Waa sababta ugu sareysa sababta gacan-qaadka TLS uu u guuldareystay inta badan. Waqtiga nidaamka waxaa loo isticmaalaa in lagu tijaabiyo in shahaadodu ay sax tahay ama ay dhacday. Haddii ay ismaandhaaf u dhexeeya wakhtiga kombiyuutarkaaga iyo server-ka, waxay ka dhigi kartaa shahaado inay u ekaadaan kuwo dhacay. Hagaajin wakhtiga adiga oo si toos ah u dejinaya.

Hadda booqo mar kale mareegaha, oo hubi haddii ay hagaajisay gacan qaadka TLS

2] Nin dhibka dhexda ku jira

Waxaa jira hal sharci haddii ay ku dhacayso hal goob, markaa dhibaatada software-ka ee amniga, laakiin haddii ay ku dhacdo dhammaan mareegaha, markaa waa dhibaatada nidaamka.

Software-ka amniga ama fidinta browserka ee kumbiyuutarkaagu waxa laga yaabaa inay dhexda u galaan isku-xidhka TLS oo ay beddelaan wax keenaya gacan-qaadka TSL ee dhibaatada leh . Waxa kale oo suurtogal ah in fayraska nidaamka uu keeno dhammaan dhibaatada TLS .

Kordhinta browserka qaarkood ayaa beddela goobaha wakiilnimada^{(change proxy settings)} , waxaana laga yaabaa inay keento dhibaatadan.

Si kastaba ha ahaatee, waxaad u baahan tahay inaad hagaajiso kombiyuutarkaaga ama software ammaanka. Sida ugu fiican ee lagu sii xaqiijin karo waa adiga oo kombuyuutar kale la isticmaalo oo la furo isla mareegta ama Application-ka kaas oo dhibaatada keenay.

3] Beddel borotokoolka TLS ee Windows

Windows 10 iyo noocyadii hore ee Windows ayaa xuddun u ah habaynta borotokoolka ee nidaamka. Haddii aad u baahan tahay inaad bedesho nooca TLS , waxaad ku samayn kartaa adigoo isticmaalaya Internet Properties .

• Ku^(Enter) qor inetcpl.cpl Run - guud oo ku dhufo furaha
• Marka uu furmo daaqada guryaha ee Internetka^(Internet) , u gudub tab Advanced .
• U dhaadhac dhamaadka si aad u hesho qaybta Amniga^(Security) , oo halkan waxaad ku dari kartaa ama ka saari kartaa TLS .
• Haddii website-ku uu raadinayo TLS 1.2 , oo aan la hubin, waxaad u baahan tahay inaad hubiso. Sidoo kale, haddii qof uu tijaabinayo TLS 1.3^{(with TLS 1.3)} , waxaad u baahan tahay inaad hubiso.
• Codso^(Apply) si aad u kaydsato, oo isku day inaad mar kale furto isla mareegta.

Iyadoo Chrome , IE, iyo Edge ay isticmaalaan sifooyinka Windows , Firefox , sida xogta shahaadadeeda, ayaa iskeed u maamusha. Waa kan sida loo beddelo borotokoolka TLS ee Firefox :

• Fur Firefox, ku qor  about:config  oo tabo Gelida
• Sanduuqa raadinta, ku qor TLS , oo hel security.tls.version.min
• Waxaad u bedeli kartaa:
  • 1 iyo 2 in lagu qasbo TLS 1 iyo 1.1
  • 3 in lagu qasbo TLS 1.2
  • 4 in lagu qasbo borotokoolka ugu badan ee TLS 1.3 .

Akhri^(Read) :  Sida loo damiyo TLS 1.0^{(How to disable TLS 1.0)} .

4] Tirtir Profile Browser^{(Delete Browser Profile)} ama Xogta Shahaadada^{(Certificate Database)}

Barowsar kasta waxa uu hayaa kaydka xogta shahaadooyinka. Tusaale ahaan, muuqaal kasta oo Firefox ah wuxuu leeyahay faylka cert8.db . Haddii aad tirtirto faylkaas, oo dib-u-bilaabid uu hagaajiyo, markaa arrintu waxay la xiriirtaa kaydka xogta caddaynta ee degaanka.

Sidoo kale, gudaha Windows , marka la isticmaalayo IE ama Edge , Maamulaha Shahaadada ayaa ka mas'uul ah, ama waxaad aadi kartaa edge://settings/privacy oo guji  Manage HTTPS/SSL certificates and settings.Tirtir shahaadooyinka oo isku day markale

Haddii aadan heli karin xogta xogta, tirtir profile-ka, oo isku day mar kale.

4] Dib u deji browserka^{(4] Reset Browser)}

Waa xalka ugu dambeeya haddii aad la kulanto arrinka mid ka mid ah browser-yada. Waxa aad dooran kartaa in aad gabi ahaanba isaga saarto oo aad dib u dajin karto ama dib u dajin karto browserka adiga oo isticmaalaya qaabka la dhisay. Raac xiriirinta si aad dib ugu dejiso Chrome , Microsoft Edge , iyo Firefox .

Ugu dambeyntii, inta aad ka baadhi karto mareegaha xitaa haddii shahaadodu ay khaldan tahay, iska hubi inaadan samayn nooc kasta oo macaamil ganacsi ah shabakada. Midkoodna waa inaadan isticmaalin kaarka deynta, mana aha inaad geliso eraygaaga sirta ah.

Waxaan rajeyneynaa in talooyinkan ay fududaayeen in la raaco, oo aad awooday inaad ku xalliso arrinta TLS ee browserkaaga ama kombiyuutarkaaga. Waxaan isku dayay intii karaankeyga ah inaan ku siiyo xal kugu filan, laakiin run ahaantii, TLS waa mid aad u ballaaran, waxaana laga yaabaa in xalal badan la heli karo.

What is TLS handshake? How to fix TLS handshake?

TLS or Transport Layer Security is an encryption protocol. It is designed such that communication through TLS remains secure and private. In this post, I will explain what TLS handshake is and how to fix the TLS handshake if you face issues.

Before we go ahead and talk about the TLS handshake, let’s understand when TLS occurs. Every time you access a website or application over HTTPS, TLS is used. When you access emails, messages, and even VOIP, it uses TLS. You should know that HTTPS is an implementation of TLS encryption.

What is TLS handshake

A handshake is a form of negotiation between two ends. Just like when we meet people, we shake hands, and then go ahead with anything else. On similar lines, the TLS handshake is a form of acknowledgment between two servers.

During the TLS handshake, the servers verify each other and establish encryption, and also exchange keys. If everything is authentic, and as expected, more data exchange will take place. There are four major steps:

1. Specify which version of TLS will be used for communication.
2. Choose which encryption algorithms  will be used
3. Authenticity is verified using public key and the SSL certificate authority’s digital signature
4. Session keys are generated and exchanged

In layman’s word, they first say hello, then the server offers a certificate that the client needs to verify. Once the verification is complete, a session is generated. A key is created through which data is exchanged through the session.

Read: Difference between TLS and SSL encryption methods.

How to fix TLS handshake

You cannot do anything if there is a server-side issue – but you are having a problem with the browser, it can be fixed. For example, if the server offers a certificate that cannot be authenticated, then you cannot do anything about it. However, if the problem is a mismatch of the TLS protocol, then you can change it from the browser.

1. Check if the system time is correct
2. Check for Man in the middle problem
3. Change TLS Protocol in Windows
4. Delete Browser Profile or Certificate Database
5. Reset Browser.

There are many more reasons why the TLS handshake can fail, and it depends on the scenario. So here some ways to fix TLS, but before that, always use these rules to filter out the problem.

• Check with different sites, and if the problem remains.
• Switch to multiple network connections, i.e., WiFi or Wired
• Change network, i.e., connect to a mobile hotspot or different router or even try a public network

1] Check if the system time is correct

It is the top reason why the TLS handshake has failed most of the time. The system time is used to test whether the certificate valid or expired.  If there is a mismatch between the time on your computer and the server, it can make certificates look expired.  Fix the time by setting it to automatic.

Now visit the website again, and check if has fixed the TLS handshake

2] Man in the middle problem

There is one rule if it’s happening for one site, then its security software problem, but if it’s happening for all the websites, then its a system problem.

The security software or browser extension on your computer may be intercepting the TLS connections and changing something which results in problematic TSL handshake. It is also possible that a virus on the system is causing all the TLS problem.

Some browser extensions change proxy settings, and it may cause this problem.

In either case, you need to fix your computer or security software. The best way to further verify this is by using another computer and open the same website or application, which was causing the problem.

3] Change TLS Protocol in Windows

Windows 10 and earlier versions of Windows centralize the protocol settings in the system.  If you need to change the TLS version, you can do it using Internet Properties.

• Type inetcpl.cpl in the Run prompt and hit Enter key.
• Once the Internet properties window opens, switch to the Advanced tab.
• Scroll to the end to find the Security section, and here you can add or remove TLS.
• If the website is looking for TLS 1.2, and it is not checked, you need to check it. Similarly, if someone is experimenting with TLS 1.3, you need to check it.
• Apply to save, and try opening the same website again.

While Chrome, IE, and Edge use Windows features, Firefox, like its certificate database, manages on its own. Here is how to change the TLS protocol in Firefox:

• Open Firefox, type about:config and press Enter
• In the search box, type TLS, and locate security.tls.version.min
• You can change it to:
  • 1 and 2 to force TLS 1 and 1.1
  • 3 to force TLS 1.2
  • 4 to force a maximum protocol of TLS 1.3.

Read: How to disable TLS 1.0.

4] Delete Browser Profile or Certificate Database

Every browser maintains a database for certificates. For example, every Firefox profile has a cert8.db file. If you delete that file, and a restart fixes it, then the issue is related to the local certificate database.

Similarly, in Windows, when using IE or Edge, the Certificate Manager is responsible, or you can go to the edge://settings/privacy and click on Manage HTTPS/SSL certificates and settings. Delete certificates and try again

If you cannot find the database, delete the profile, and try again.

4] Reset Browser

It’s the last resort if you are having the issue with one of the browsers. You can choose to uninstall completely and then reinstall or reset the browser using the inbuilt feature. Follow the links to reset Chrome, Microsoft Edge, and Firefox.

Lastly, while you can browse a website even if the certificate is invalid, make sure not to perform any kind of a transaction with the website. Neither you should use a credit card, nor you should enter your account password.

We hope these tips were easy to follow, and you were able to resolve the TLS issue on your browser or your computer. I have tried my best to offer you enough solution, but honestly, TLS is extremely vast, and more solutions may be available.

Related posts

• Sida loo isticmaalo Network Sniffer Tool PktMon.exe gudaha Windows 10

• Daar xiriirinta Shabakadda intaad ku jirto heeganka casriga ah Windows 11/10

• Waa maxay Tor Network maxaase loo isticmaalaa?

• Ku cabbir xawaaraha Shabakadda Aagga Maxaliga ah qalabka Tijaabada Xawaaraha LAN

• Daar ama dami Wi-Fi iyo adabtarada Ethernet Windows 11

• Waa maxay sababta wakhtiga Pingygu aad ugu sarreeyo gudaha Windows 11/10?

• Aan awoodin in uu khariidad ka sameeyo wadayaasha shabakada gudaha Windows 11/10

• Glasswire Firewall iyo Qalabka Kormeerka Shabakadda ee dib u eegista

• Ku samee Hantidhawrka Shabakadda leh Alloy Discovery Express ee Windows 11/10

• Helitaanka shabakadu waa dansan yahay oo ma daar Windows 11/10

• Sida loo hubiyo dejinta Wi-Fi Network Adapter on Windows 11/10

• Sida loo helo cinwaanka IP-ga ee Windows 10 - Raadinta Ciwaanka IP-ga

• Sida loo sameeyo isku xirka internetka Windows 11/10

• Sida loo habeeyo Global Proxy Server Settings gudaha Windows 10

• Daaqadaha ma heli karaan Settings Network router-ka gudaha Windows 11/10

• Software-ka Shabakadda Shabakadda ee ugu fiican ee naqshadaynta shabakadaada

• Sida loogu ogolaado Chrome inuu galo shabakada Firewall kaaga

• Daaqadaha si toos ah uma ay ogaan karin goobaha wakiillada ee shabakadan

• Sida loo geliyo SIM-kadhka & u dejiso isku xirka xogta aaladda dusha sare

• Sida loo hagaajiyo DHCP Lookup qalad guuldaraystay om Windows & Chromebooks