Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-11-04 Thread Steve Hill
On 31/10/14 20:03, Dieter Bloms wrote: > but when the server is broken, it will not work. > Have a look at: > > https://www.ssllabs.com/ssltest/analyze.html?d=www.taxdisc.service.gov.uk > >> It works correctly when FireFox connects directly to the web server >> rather than going through the prox

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 1:39 p.m., Marcus Kool wrote: > > > On 10/31/2014 10:12 PM, Amos Jeffries wrote: On 1/11/2014 12:09 > p.m., Marcus Kool wrote: With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fail

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Marcus Kool
On 10/31/2014 10:12 PM, Amos Jeffries wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 12:09 p.m., Marcus Kool wrote: With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fails (tries TLS1.2) openssl s_client -connect www.taxdisc.service.gov.uk

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/11/2014 12:09 p.m., Marcus Kool wrote: > With OpenSSL 1.0.1e-fips : > > openssl s_client -connect www.taxdisc.service.gov.uk:443 > fails (tries TLS1.2) openssl s_client -connect > www.taxdisc.service.gov.uk:443 -ssl3 works > > The webmail serv

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Marcus Kool
With OpenSSL 1.0.1e-fips : openssl s_client -connect www.taxdisc.service.gov.uk:443 fails (tries TLS1.2) openssl s_client -connect www.taxdisc.service.gov.uk:443 -ssl3 works The webmail server of my ISP works like this: it uses only TLS1.0, so no TLS1.1 or TLS1.2, but when with op

Re: [squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Dieter Bloms
Hi Steve, On Fri, Oct 31, Steve Hill wrote: > This is probably not a problem with Squid, but I'm posting here in the > hope that someone may have more clue than me when it comes to SSL :) ... > If I force openssl into TLS1 mode (with the -tls1 argument) then it > works fine. TLS 1.1 and 1.2 bo

[squid-users] SSL bump fails accessing .gov.uk servers

2014-10-31 Thread Steve Hill
This is probably not a problem with Squid, but I'm posting here in the hope that someone may have more clue than me when it comes to SSL :) When accessing https://www.taxdisc.service.gov.uk/ through an SSL bumping squid, I get: - The following error was encountered while trying to retrieve t