[rancid] TR: SSL error since I migrated from Squid3.5.10 to Squid3.5.13.

[Sebastien.Boulianne at cpu.ca]

I forgot to mention that happens only with phony and Active-Sync.

Thanks for your answer.

Sébastien Boulianne
Administrateur réseau & système / Network & System Administrator (Windows & Linux).
Gestion des infrastructures / Infrastructure Management.
CCNA / CompTIA Server+ / Spécialiste en supervision.
sebastien.boulianne at cpu.ca<mailto:sebastien.boulianne at cpu.ca>

[cid:image001.jpg at 01D159F9.7CE18BE0]


2323, du Versant Nord, suite 100
Québec (Québec) G1N 4P4
Téléphone : (418) 681 6974 poste 666
Ligne sans frais : 1 888 681 6974
Télécopieur : (418) 681 1444

Information confidentielle : Le présent message, ainsi que tout fichier qui y est joint, est envoyé à l'intention exclusive de son ou de ses destinataires, il est de nature confidentielle et peut constituer une information privilégiée. Nous avertissons toute personne autre que le destinataire prévu que tout examen, réacheminement, impression, copie, distribution ou autre utilisation de ce message et de tout fichier qui y est joint est strictement interdit. Si vous n'êtes pas le destinataire prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer ce message et tout document joint de votre système. Merci.

Confidentiality Warning : This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system. Thank you.

« Gérer c'est prévoir (voir avant, avoir une vision de l'avenir) »
[cid:image002.jpg at 01D159F9.7CE18BE0]

De : Sebastien Boulianne
Envoyé : 28 janvier 2016 18:25
À : Maillist Rancid (rancid-discuss at shrubbery.net) <rancid-discuss at shrubbery.net>
Objet : SSL error since I migrated from Squid3.5.10 to Squid3.5.13.
Importance : Haute

Hi,

Since I migrated my Squid to the latest version, many many many users notified me they are SSL warning message.
I haven't this issue with the Squid3.5.10.
I used the Eliezer's yum package.

On the browsers, I don't get any warning message.

I used exactly the same config and the same wildcard certificate.

When I run service squid status, I got this:
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)

Anyone can explain me that please and tell me how to fix it ?

Thanks you very much for your answer.

Sébastien

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20160128/6ff134aa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1648 bytes
Desc: image001.jpg
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20160128/6ff134aa/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 3146 bytes
Desc: image002.jpg
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20160128/6ff134aa/attachment-0001.jpg>