问题
I have created a certificate using the following SSL command:
makecert -r -pe -n "CN=www.yourserver.com" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12
I assigned it to a web site on IIS, but when I try to hit the url of the web site I receive: "SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)" when using Firefox.
What is causing it and how to fix it?
回答1:
This is a typical sign that the SSL port on your IIS server is actually serving plain HTTP.
Have you set the SSL port directive in IIS to 443? Perhaps if you can show your IIS config?
Also this MS support article may help you: http://support.microsoft.com/kb/324069.
NOTE - I've voted to migrate this to serverfault.com as it's system-admin related as opposed to programming-related.
回答2:
I had this same exact problem. Beat my head on the wall for a while, restarting IIS, checking all the settings, Googling for possible answers, etc. etc. Then I did the magical cure-all for every Windows system: I restarted the system. Everything worked perfectly after that.
回答3:
"This is a typical sign that the SSL port on your IIS server is actually serving plain HTTP."
Exactly. I had to change Skype to not use ports 80 & 443, that did the trick. Based on solution in this thread: Applying SSL certificate in IIS manager and "The process cannot access the file because it's being used by another process" error
来源：https://stackoverflow.com/questions/2522288/iis-ssl-error-ssl-error-rx-record-too-long