<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=909532914-28062019>the
</SPAN>SSL3_GET_MESSAGE<SPAN class=909532914-28062019> ? </SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>Maybe because the only support TLSv1.2 ? </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>Its long ago i seen a site good configured for ones with its
TLS settings. </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>So most probely, your downgrading the connection within the
proxy settings to sslv3 </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>And sharing you config might help to see that.
</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>Greetz, </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial>Louis</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=909532914-28062019><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV><FONT color=#0000ff size=2
face=Arial></FONT><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV lang=nl class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>Van:</B> squid-users
[mailto:squid-users-bounces@lists.squid-cache.org] <B>Namens </B>Walter
H.<BR><B>Verzonden:</B> vrijdag 28 juni 2019 16:21<BR><B>Aan:</B>
squid-users@lists.squid-cache.org<BR><B>Onderwerp:</B> [squid-users]
SQUID_ERR_SSL_HANDSHAKE<BR></FONT><BR></DIV>
<DIV></DIV>Hello,<BR><BR>at some specific hosts<BR>this is shown in
cache.log<BR>2019/06/28 16:11:12 kid1| Error negotiating SSL on FD 17:
error:1408E0F4:SSL routines:SSL3_GET_MESSAGE:unexpected message
(1/-1/0)<BR><BR>and this is the error page I get<BR><BR>Failed to establish a
secure connection to ...<I><BR><BR> (71) Protocol error (TLS code:
SQUID_ERR_SSL_HANDSHAKE)</I><BR> Handshake with SSL server failed:
error:1408E0F4:SSL routines:SSL3_GET_MESSAGE:unexpected message<BR><BR>what is
causing this?<BR><BR>in case some want to try: <A
class=moz-txt-link-freetext
href="https://www.3bg.at/">https://www.3bg.at/</A><BR>(when disabling SSL-bump
no problem)<BR><BR>Thanks,<BR>Walter<BR><PRE class=moz-signature cols="72"></PRE></BLOCKQUOTE></BODY></HTML>