[rancid] TR: SSL error since I migrated from Squid3.5.10 to Squid3.5.13.

[S***@cpu.ca]

I forgot to mention that happens only with phony and Active-Sync.

Thanks for your answer.

Sébastien Boulianne
Administrateur réseau & système / Network & System Administrator (Windows & Linux).
Gestion des infrastructures / Infrastructure Management.
CCNA / CompTIA Server+ / Spécialiste en supervision.
***@cpu.ca<mailto:***@cpu.ca>

[cid:***@01D159F9.7CE18BE0]


2323, du Versant Nord, suite 100
Québec (Québec) G1N 4P4
Téléphone : [phone] poste 666
Ligne sans frais : 1 888 681 6974
Télécopieur : [phone]

Information confidentielle : Le présent message, ainsi que tout fichier qui y est joint, est envoyé à l'intention exclusive de son ou de ses destinataires, il est de nature confidentielle et peut constituer une information privilégiée. Nous avertissons toute personne autre que le destinataire prévu que tout examen, réacheminement, impression, copie, distribution ou autre utilisation de ce message et de tout fichier qui y est joint est strictement interdit. Si vous n'êtes pas le destinataire prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer ce message et tout document joint de votre système. Merci.

Confidentiality Warning : This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system. Thank you.

« Gérer c'est prévoir (voir avant, avoir une vision de l'avenir) »
[cid:***@01D159F9.7CE18BE0]

De : Sebastien Boulianne
Envoyé : 28 janvier 2016 18:25
À : Maillist Rancid (rancid-***@shrubbery.net) <rancid-***@shrubbery.net>
Objet : SSL error since I migrated from Squid3.5.10 to Squid3.5.13.
Importance : Haute

Hi,

Since I migrated my Squid to the latest version, many many many users notified me they are SSL warning message.
I haven't this issue with the Squid3.5.10.
I used the Eliezer's yum package.

On the browsers, I don't get any warning message.

I used exactly the same config and the same wildcard certificate.

When I run service squid status, I got this:
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL connection on FD 155: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3...wn (1/0)

Anyone can explain me that please and tell me how to fix it ?

Thanks you very much for your answer.

Sébastien

[Alan McKinnon]

Post by S***@cpu.ca
I forgot to mention that happens only with phony and Active-Sync.

This does not appear to be a rancid problem.

Did you select the wrong address from the address book?

Post by S***@cpu.ca
Thanks for your answer.
*Sébastien Boulianne*
Administrateur réseau & système / Network & System Administrator (Windows & Linux).
Gestion des infrastructures / Infrastructure Management.
CCNA / CompTIA Server+ / Spécialiste en supervision.
*
2323, du Versant Nord, suite 100
Québec (Québec) G1N 4P4
Téléphone : [phone] poste 666*
*Ligne sans frais : 1 888 681 6974
Télécopieur : [phone]***
_Information confidentielle :_Le présent message, ainsi que tout fichier
qui y est joint, est envoyé à l'intention exclusive de son ou de ses
destinataires, il est de nature confidentielle et peut constituer une
information privilégiée. Nous avertissons toute personne autre que le
destinataire prévu que tout examen, réacheminement, impression, copie,
distribution ou autre utilisation de ce message et de tout fichier qui y
est joint est strictement interdit. Si vous n'êtes pas le destinataire
prévu, veuillez en aviser immédiatement l'expéditeur par retour de
courriel et supprimer ce message et tout document joint de votre
système. Merci.
_Confidentiality Warning :_This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of this message and any attachments is
strictly prohibited. If you are not the intended recipient, please
notify the sender immediately by return e-mail, and delete this message
and any attachments from your system. Thank you.
*« Gérer c’est prévoir (voir avant, avoir une vision de l’avenir) »*
*De :*Sebastien Boulianne
*Envoyé :* 28 janvier 2016 18:25
*Objet :* SSL error since I migrated from Squid3.5.10 to Squid3.5.13.
*Importance :* Haute
Hi,
Since I migrated my Squid to the latest version, many many many users
notified me they are SSL warning message.
I haven’t this issue with the Squid3.5.10.
I used the Eliezer’s yum package.
On the browsers, I don’t get any warning message.
I used exactly the same config and the same wildcard certificate.
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:30 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Jan 28 18:17:31 squid.cpu.ca squid[5147]: Error negotiating SSL
connection on FD 155: error:14094416:SSL
routines:SSL3_READ_BYTES:sslv3...wn (1/0)
Anyone can explain me that please and tell me how to fix it ?
Thanks you very much for your answer.
Sébastien
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo/rancid-discuss