How do I clear Chrome's SSL cache? - Server Fault

Chrome stores SSL certificate state per host in browser history. So just clear browser history ( Ctrl + Shift + Del ), at least the following parts:. ServerFaultisaquestionandanswersiteforsystemandnetworkadministrators.Itonlytakesaminutetosignup. Signuptojointhiscommunity Anybodycanaskaquestion Anybodycananswer Thebestanswersarevotedupandrisetothetop Home Public Questions Tags Users Unanswered FindaJob Jobs Companies Teams StackOverflowforTeams –Collaborateandshareknowledgewithaprivategroup. CreateafreeTeam WhatisTeams? Teams CreatefreeTeam Teams Q&Aforwork Connectandshareknowledgewithinasinglelocationthatisstructuredandeasytosearch. Learnmore HowdoIclearChrome'sSSLcache? AskQuestion Asked 10years,5monthsago Active 1year,6monthsago Viewed 337ktimes 93 15 IhaveaHAProxy/stunnelserverthathandlesSSLforoursitesonAWS.Duringtesting,Icreatedaself-signedcertonthisserverandhititfrommydesktopusingChrometotestthatstunnelwasworkingcorrectly. NowIhaveinstalledthelegitimatecertonthatserver.WhenIhitthesitefrommymachineinChromeitthrowsthefollowingerror: Error113 (net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH): Unknownerror. MyguessisthatChromecachedthekeyfortheself-signedcertanditdoesn’tmatchthatofthelegitimatecert.Thissiteworksinallotherbrowsersonmymachinesoit’sjustaChromeproblem. Oneinterestingnote:Whenhittingthepagefromaincognitosession(Ctrl+Shift+N),itworkscorrectly.Soitisclearlysomesortofcachething. IdidallthethingsIcouldthinkof(dumpedmycache,deletedcertsfromthePersonalandOtherPeoplepageintheManageCertificatesdialog,Ctrl+F5,etc.). MymachineisWindows7x64.Chromeversion:12.0.742.91. OntheGoogleChromeHelpForm,thereisadescriptionofwhatsoundslikethesameissue;however,noresolutionisfound. UPDATE:Itseemstohave“fixeditself”today.Ihateproblemslikethis.Istilldon’tknowwhatcauseditorhowitresolveditself.Presumablythecachedcertexpiredorsomething,butIamstillinterestedtoknowwherethisinformationisstoredandhowtoverifyit. sslcachechrome Share Improvethisquestion Follow editedMay13'15at20:09 TRiG 1,12722goldbadges1212silverbadges2929bronzebadges askedJun13'11at17:02 FoovanadilFoovanadil 1,03011goldbadge77silverbadges77bronzebadges 10 1 FromanotheruserIheard:ThisissuewascausedonmymachinebyaslightlyoutdatedAvastAntivirus.AvastcreatesalayerbetweenyourbrowserandthewebwithanSHA1certificate.Ifyoudisableavastforamoment,Chromewillbeabletoaccessthecertificatedeliveredbyyourserver.Inmycase,asimpleAvastProgramUpdatesolvedtheissue. – Foovanadil Apr21'15at20:18 ThiswasnotthecaseonmymachineasIdidn'thaveantivirusinstalled. – Foovanadil Apr21'15at20:20 1 SincethequestionislockedIcan'taddananswer,butinwindowsyouhaveto1)GotoSettings=>ManageCertificates=>deletethecertthen2)CloseChromeandthen3)GototaskmanagerandmanuallykillalloftheChrome.exeprocesses.OnceyouopenChromeagainyoushouldbegoodtogo. – jakejgordon Jun10'15at14:20 @jakejgordon--Iwasn'tabletoseethecertintheManageCertificateswindow,butkillingChrome.exeandreopeningChromedidthetrickforme.Note,Ihaveawebfilter/monitoringproxyrunningaswell,butdidnotneedtostopit. – LarsKemmann Aug25'15at2:11 5 Whyisthisquestion"protected"whentherearenovalidorworkinganswers?@Michael-Hampon? – NickG Jul6'17at15:05  |  Show5morecomments 6Answers 6 Active Oldest Votes 37 ChromestoresSSLcertificatestateperhostinbrowserhistory. Sojustclearbrowserhistory(Ctrl+Shift+Del),atleastthefollowingparts: Cachedimagesandfiles Hostedappdata Contentlicenses Cookiesandothersitedata,forChromeversion64 Solution2.Iftheabovedoesn'thelp,trythis: CloseChrome,killallchromebackgroundprocesses Deletethedirectory: %USERPROFILE%/AppData/Local/Google/Chrome/UserData/CertificateTransparency Share Improvethisanswer Follow editedMay11'20at16:15 answeredMay5'15at18:57 rustyxrustyx 1,35733goldbadges1717silverbadges2626bronzebadges 8 Myproblemisancientnowsochromemayhavehavechangethisbehaviorbutitdidn'tworkformetoclearthecache(asInotedinthequestion).Ifitworksnowthatwouldbegreat. – Foovanadil May5'15at22:50 52 ThisdidNOTworkforme – SerjSagan Aug11'15at9:38 1 Thisworkedforme,myspecificproblemwasthatChromewassayingthatthecertificatehadexpired,butsinceotherscouldaccessthesiteonhttps,Icouldseethattherewasindeedanewcertificateavailable,butforsomereasonChromewasn'trequestingit,orpossiblyreadingitproperly. – shaheenery Oct5'15at21:18 1 FIDDLERusers:IfyouareusingFiddlerwithHTTPSintercepts,fiddlerwillcacheSSLcertificates.Tofixthis,youneedtorunfiddlers"RemoveInterceptionCertificates"option,clearyourbrowser'scache(noneedtoclearanythingelse,andrestartthebrowser.Dependingonwhichbrowseryou'reusing,thelasttwostepsmightnotbeneeded,buttheseareneededforChrome – NickG Jul6'17at15:14 4 SadthatI'vesearchedthewholeinternetanddidn'tgetworkingsolution.Butfinallytrieditoutmyself.CloseChromeanddeletethedirectory"CertificateTransparency"under"C:/Users//AppData/Local/Google/Chrome/UserData"andrestart,thenyou'llfindthepromptappearagain. – ShouYa Nov7'17at16:27  |  Show3morecomments 13 ManyproblemswithSSLcertificatescanbesolvedbysimplyremovingthefilefromthecachefolder. InChromeorChromium,thefiletoberemovediscert9.dbinthefolder~/.pki/nssdb.(InFirefox,you’dwanttoremovecert8.db.) Attention!Afterremovingthesefiles,youwillneedtore-registerCAsinyourbrowser. Thisissolutionisforlinuxsystems,thestepsforWindowsuserswouldbesomewhatdifferent. Share Improvethisanswer Follow editedApr25'20at19:26 cmc 61766silverbadges77bronzebadges answeredOct11'13at17:36 ReinaldoValeReinaldoVale 13911silverbadge33bronzebadges 4 7 Itwouldbegoodifyoucouldelaborateorprovidelinksregardingre-registeringCAs. – MikeShultz May6'17at6:45 Itseemsthatquittingandrestartingchromeworksafterthis – IanTurton Oct16'17at11:06 ~/.pkifolderdoesn'texistforme(onMac)-andlackofexplanationaboutre-registeringCAsseemslikeabigoversight.Also,"onWindows,somewhatdifferent"isnotparticularlyhelpful;ifyoudon'tknowhowtofixitforWindows,justsay"thisisa*nix-onlysolution" – dwanderson Jun27'18at19:04 Thisworkedforme,thanks!Ubuntu18.04/Linux. – dusoft Feb3'20at21:38 Addacomment  |  4 AsfarasIknow,certificatesarenotspecifictoGoogleChrome(atleastonWindows)buttothewholesystem.You’vealreadydeletedthatcertthroughChrome’sinterface,soitshouldgone. Justtobecertain,youcouldtry. Start→Run→certmgr.msc AnothertooltotryisCCleaner.ItshouldhelpwithbettercleaningofChrome’scaches. Share Improvethisanswer Follow editedMay13'15at20:09 TRiG 1,12722goldbadges1212silverbadges2929bronzebadges answeredJun13'11at17:33 LazyOneLazyOne 2,96411goldbadge1515silverbadges1515bronzebadges 4 1 Triedcertmgr.mscandIdon'tseethecertinthere.Likeyousaiditisclearlygonesincetheotherbrowsersdotherightthing,maybethisisjustachromebugofsomesort – Foovanadil Jun13'11at18:36 So...didyouhadanylucksofar?HaveyoutriedCCleanerassuggested?..oranyothertool? – LazyOne Jun14'11at9:00 IranCCCleanerandlookedatwhatitwantedtodeleteanditwasnothingmorethanwhatChromewilldelete(Justcookiesandsessioninfo). – Foovanadil Jun14'11at16:38 1 ifthatistrue,whyincognitivemodeworks? – JoseNobile Feb6'17at5:38 Addacomment  |  3 ForWindows10,thereisawaytoclearonlyOCSPandCRLinformationwithoutclearingChromehistory. MoredetailscanbefoundfromMr.Dimcev'sblogpost http://www.carbonwind.net/blog/post/Viewing-clearing-and-disabling-the-OCSP-and-CRL-cache-on-Windows-7.aspx Runningthesuggestedcertutil-urlcacheocspdeleteislikelytoresultinFAILED:0x80070020(WIN32:32ERROR_SHARING_VIOLATION)ifChromeisrunning. Share Improvethisanswer Follow answeredFeb19'20at12:34 JariTurkiaJariTurkia 23411silverbadge44bronzebadges 1 2 Thiswasthesolutionthatworkedformeandenabledmetogetpastthecachedcerts. – BlackDynamite Nov18'20at19:47 Addacomment  |  2 IconfirmedthisworkedformeonWindows10: Pre-requisite:Certify(useanothercomputerwithno"knowledge"ofyoursite)thatyourserverservesthenewcertificatetobrandnewcomputers,atleast. ClearthecacheofChrome.IchosetoclearallthreeoptionspresentedwhenusingCTRL+SHIFT+DEL:History,Cookies,andCached.However,youcanprobablykeepyourhistory. Closechrome,andusingtheTaskManager,certifythatthereisnochrome.exerunning.Ithinkchromecachesthecertificateinmemory. Re-openchromeandvisitthesite.Yourchromebrowsershouldnowpullthelatestcertificateandnotusethecachedone. Share Improvethisanswer Follow editedFeb19'20at16:15 answeredNov1'19at15:36 ChrisChris 1,38111goldbadge1212silverbadges2222bronzebadges 2 WipingentirehistoryseemswaytoopowerfulmethodtoremoveOCSP-infoforasinglesite.Istherereallynoalternative? – JariTurkia Feb19'20at12:29 @JariTurkia,Ibetyoucouldactuallykeepyourhistory.I'veupdatedmyanswertosuggestthis.Youranswercouldstillbehelpfulforuserswhowanttokeepalltheircachedsitedata. – Chris Feb19'20at16:16 Addacomment  |  -3 Moreaccurateway: Ctrl+Shift+Del(orSettings>Advanced>Clearbrowsingdata) [Timerange:Alltime] Chachedimagesandfiles press:Cleardata Share Improvethisanswer Follow answeredSep24'18at9:26 waza123waza123 17711goldbadge11silverbadge66bronzebadges 1 4 theOPalreadysaidheclearedhiscache,soforthis7yearsoldquestionthisanswerwillnothelptheop. – DennisNolte Sep24'18at9:59 Addacomment  |  Highlyactivequestion.Earn10reputation(notcountingtheassociationbonus)inordertoanswerthisquestion.Thereputationrequirementhelpsprotectthisquestionfromspamandnon-answeractivity. Nottheansweryou'relookingfor?Browseotherquestionstaggedsslcachechromeoraskyourownquestion. TheOverflowBlog Podcast391:Explainingthesemiconductorshortage,andhowitmightend DoesES6makeJavaScriptframeworksobsolete? FeaturedonMeta Nowlive:Afullyresponsiveprofile PleasewelcomeValuedAssociates#999-BellaBlueϩ-SalmonofWisdom Linked 3 ApachecipherconfigurationofmywebsitemakesGoogleChromecomplain 1 ThesiteisusingoutdatedsecuritysettingsthatmaypreventfutureversionsofChromefrombeingabletosafelyaccessit-evenwithSHA2 Related 8 SSLconnectionerrorsfromApache 1 ApachesendingwrongSSLcertificateonsomeconnections/browsers 2 VarnishServerthrowserror503whentheback-endisdown 0 Pagecan'tbedisplayedwithIISandSSL 2 Troubledebuggingself-signedSSLcertforApache 38 Cannotgetridof`net::ERR_CERT_COMMON_NAME_INVALID`errorinchromewithself-signedcertificates HotNetworkQuestions HowmuchdamagetotheUSwouldaYellowstoneeruptioncause? Sextupletsin6/8time HowmuchhasfuelefficiencyincreasedinrocketssincetheApollomissions? Howdoyoustudyatextbookthatdoesn'thaveanyexercises? Raftersseparatingfromceiling Swapeverytwoelementsinalist Canabeefandporkmixburgerbeservedmedium IsKamalaHarris'approvalratingthelowestofanyvicepresident? Isitmoreefficienttouseamapandcall.get(),oruseasetandcall.contains()? WhatlanguagedidBrahetalkwithKepler? HowtogetLEDlightappearanceright Threequestionsaboutthearticle"Ditchp-values.UseBootstrapconfidenceintervalsinstead" Changesizeofparticlesinold"laserparticle"example? LawFirmwithonelawyerandhundredsoflegalexpertswhohaven'tpassedthebar Canatunnelbehiddenfromacousticscanners? WhatistheracingboardgametheyareplayinginNetflix'sshowaboutFormula1,s02e09? WhiteLEDdoesn'tlightupwhenaredLEDisparalleltoit Afterapasswordleak,isthereaLevenshteindistancefromwhichoneanewlyderivatedpasswordcanbeconsideredsafe? WhydidtheNESnotallowrotatedsprites? Whatwouldbetheeffectsofgivingouttentimestheexpectedgold? PercentageyieldofHaberprocess Usecompactprotectivefieldgeneratortoattractsandwormsinsteadofbulkytam-tamdevice MakeaScrabbleWordFinder Veryclosetosolvethesudokupuzzlebutyetnotsolved morehotquestions Questionfeed SubscribetoRSS Questionfeed TosubscribetothisRSSfeed,copyandpastethisURLintoyourRSSreader. Yourprivacy Byclicking“Acceptallcookies”,youagreeStackExchangecanstorecookiesonyourdeviceanddiscloseinformationinaccordancewithourCookiePolicy. Acceptallcookies Customizesettings