[squid-users] SSL error since I migrated from Squid3.5.10 to Squid3.5.13.

[Amos Jeffries]

On 29/01/2016 2:08 p.m., Sebastien.Boulianne wrote:
> Hi,
> 
> Since I migrated my Squid to the latest version, many many many users notified me they are SSL warning message.
> I haven't this issue with the Squid3.5.10.
> I used the Eliezer's yum package.
> 
> The problem only happens with phones using active-sync.
> I haven't changed my active-sync configuration and it worked perfectly with Squid3.5.10.
> Why does it happens then ?!??
> 

Unknown. There are a couple of possibilities.

Can you try an incremental upgrade? to 3.5.11 for a bit, then .12, then
.13 to narrow down the set of possible changes we need to look at.


> On the browsers, I don't get any warning message.
> 
> I used exactly the same config and the same wildcard certificate.
> 
> When I run service squid status, I got this:
> Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
> 
> Anyone can explain me that please and tell me how to fix it ?
> 

If you dont mind what is the "..." bit exactly ?

Amos