Console errors. Failed to load resource: net::ERR_INSECURE_RESPONSE

Question

I'm getting them on my links in my head.

GET https://fr.s.us/js/jquery-ui.css net::ERR_INSECURE_RESPONSE

GET https://fr.s.us/js/jquery-1.9.1.min.js net::ERR_INSECURE_RESPONSE

GET https://fr.s.us/js/jquery-ui.js net::ERR_INSECURE_RESPONSE

Someone please enlighten me on these jquery console errors..

Failed to load resource: net::ERR_INSECURE_RESPONSE

@cooking-good Ur server http/apache? why so not try nginx to install certificate is free, look https://www.nginx.com/blog/free-certificates-lets-encrypt-and-nginx/ ... im used and its excellent, expire 90 days, can u reinstall certificate is free. — KingRider, Aug 01 '16 at 11:49
Is there a way if these console errors can get handle with javascript?? Can we access console errors with any javascript api or event? — srikanth_yarram, Nov 11 '18 at 16:18

eb80 · Answer 1 · 2018-08-01T18:06:44.513

116

I am assuming you're using Chrome.

If so, the root problem is a certificate mismatch / expired certificate.

You can see this for yourself in the code here.

Note in particular the use of the very constant you reference in the code on line 48 of the C++ file I sent you:

 case net::ERR_INSECURE_RESPONSE:

The current version of this file is here. The error status ERR_INSECURE_RESPONSE may not any longer be on line 48 but the error code still exists in the SSL certificate portion of the code.

Note: Make sure to use the hostname which is listed in the SSL certificate, chrome automatically switches to the right hostname if you are browsing but not when using javascript.

edited Aug 01 '18 at 18:06

answered Mar 10 '14 at 17:54

eb80

4,700
5
25
30

8

This answer should be accepted as the right answer. Thanks – luongnv89 Mar 04 '15 at 22:00
12

You can bypass the certificate mismatch error by opening Chrome from the terminal: `Chrome --ignore-certificate-errors`. It should not be necessary to say this, but only do this if you know what you are doing! – northben Dec 17 '15 at 02:08
how i can configure this from the setting in google chrome ? – S Gaber Jun 07 '16 at 09:09
Also note: When browsing a hostname chrome will automatically switch to the certificate host. (for example: stripping the "www.") But they forgot to implement that feature for the javascript parser, so you need to specify the correct domain which is listed on the SSL certificate. – John Jul 20 '17 at 04:19

score 29 · Answer 2 · answered Feb 28 '14 at 00:33

The supplied host is not resolving for me (custom DNS or self configured host?) so I can only hazard to guess.

But as you are requesting the resources over SSL it is likely the certificate is invalid. Either it is self-signed and has not been added to your browser/OS exceptions or it is otherwise invalid.

Try the URI directly in the same browser and inspect the certificate.

Edit: this is in no way related to jQuery, JavaScript or CSS directly.

score 8 · Answer 3 · edited Aug 26 '16 at 10:49

8

I had this problem with chrome when I was working on a WordPress site. I added this code

$_SERVER['HTTPS'] = false;

into the theme's functions.php file - it asks you to log in again when you save the file but once it's logged in it works straight away.

edited Aug 26 '16 at 10:49

jorisw

875
1
11
17

answered Jul 23 '15 at 08:56

Andy Simpson

99
1
3

3

Although the question was asked over a year ago (Feb 2014), this answer may fix a recent change to Google Chrome (June 2015) that causes net::ERR_INSECURE_RESPONSE issues on WordPress/WooCommerce websites. More details here: http://frique.me/blog/chrome-wordpress-ssl-bug/ – Ian Lunn Jul 23 '15 at 09:48

score 6 · Answer 4 · answered Jan 03 '17 at 22:01

6

This can also happen if you have Chrome update automatically. Open Check chrome://help. The status should be:

Google Chrome is up to date.

Sometimes the status is requesting for a Chrome restart. In this case I had similar issues with several resources failing to load due to net::ERR_INSECURE_RESPONSE. After restarting Chrome, everything worked normally.

answered Jan 03 '17 at 22:01

Gabriel Petrovay

20,476
22
97
168

It was exactly the case. It helped address the issue. Thanks! – mike123 Sep 18 '17 at 13:13

score 5 · Answer 5 · answered Jul 25 '14 at 18:58

When I had the problem recently it was a cross site issue where our dev server hosts our analytics software as well as the application. In the other environments the chrome console would show this error and the javascript file (tracker) on the dev server as the source. This was causing issues for QA personnel who were trying to view the analytics data for their environment (nothing was being captured because of this issue).

The solution to fix this in-house was to add the SSL certificate the DEV site was using to the Trusted People store on the QA people's machine.

If this was a problem in production I would most likely move the javascript into the actual web apps.

score 2 · Answer 6 · edited May 13 '17 at 04:12

2

Try to open it in an incognito window. I hope this will help. Alternatively, you could modify application/.htaccess like so:

RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?/$1 [L]

edited May 13 '17 at 04:12

Yangshun Tay

49,270
33
114
141

answered Dec 24 '16 at 06:14

Naina Shukla

21
3

score 2 · Answer 7 · answered Jul 18 '17 at 14:29

In my case, sometimes when i tests my MVC project by a localhost https url (E.g. https://localhost:44373/), the Chrome raise this error: net::ERR_INSECURE_RESPONSE for the website resources (such as JS files).

So i resolve it by Clear Cache. Then i refresh the page and Chrome show me a special page about insecure url and i just allow it by click on Proceed to localhost (unsafe).

score 1 · Answer 8 · answered Mar 18 '16 at 13:58

Learn about CORS, try crossorigin.me is work fine

Example: https://crossorigin.me/https://fr.s.us/js/jquery-ui.css

Not show a message error and continue page white, u need see error is try

http://cors.io/?u=https://fr.s.us/js/jquery-ui.css

enjoin us ;-)

score 1 · Answer 9 · answered Jan 13 '17 at 22:18

1

For me the problem was the <base href="https://domain.ext/"> tag.

After removing, it was OK. Cannot really understand why it was a problem.

answered Jan 13 '17 at 22:18

KoalaBear

2,755
2
25
29

score 1 · Answer 10 · answered Jan 19 '17 at 15:16

1

You are trying to get data from an https that does not have certificate. Change "https://" to "http://". Worked for me.

answered Jan 19 '17 at 15:16

Marco Rey

69
1
4

score 1 · Answer 11 · answered Sep 15 '17 at 10:17

It was on Chrome for Android in my case. All the static files served from a CDN with a CNAME that's SSL encrypted were not showing up. On Chrome desktop, it all showed fine.

Broken SSL cert

When I properly added the certs in ca_bundle the files displayed correctly.

Chrome for Android takes encryption seriously unlike Desktop. I hope this saves you time and stress

score 0 · Answer 12 · edited Nov 30 '17 at 13:31

0

If you use chrome, you can make a shortcut，right click and edit the shortcut's target, append this after target's string:

--ignore-certificate-errors

The complete string looks like this:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --ignore-certificate-errors

edited Nov 30 '17 at 13:31

Isma

14,604
5
37
51

answered Nov 30 '17 at 01:27

L.Johnny

44
4

score 0 · Answer 13 · edited Jan 15 '18 at 14:21

0

Encode and make it like this: $_GET[].

edited Jan 15 '18 at 14:21

answered Jan 15 '18 at 11:56

Sven Junior

1
1

Console errors. Failed to load resource: net::ERR_INSECURE_RESPONSE

13 Answers13

Linked