Getting ssl/https error

[bononos]

I'm getting an ssl/https related error on and off with chrome, firefox. Edge just refuses to load and just gives a generic page not found error.

forums.anandtech.com uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.
This is likely to be caused when the server needs RC4, which is no longer considered secure.

 

[Ryan Smith]

Humm. What OS are you on?

This is a brand new, fully up to date and best-practices configured server instance. We do not use RC4, and running a third party check shows that everything is configured correctly.

https://www.ssllabs.com/ssltest/analyze.html?d=forums.anandtech.com&s=184.50.88.3&hideResults=on

A modern device supporting TLS 1.0 or newer should be able to connect. Do you possibly have a network security proxy or some other MITM device intercepting your connection?

 

[bononos]

Humm. What OS are you on?
This is a brand new, fully up to date and best-practices configured server instance. We do not use RC4, and running a third party check shows that everything is configured correctly.
https://www.ssllabs.com/ssltest/analyze.html?d=forums.anandtech.com&s=184.50.88.3&hideResults=on

A modern device supporting TLS 1.0 or newer should be able to connect. Do you possibly have a network security proxy or some other MITM device intercepting your connection?

Win10 latest updates, browsers are also updated. Quite recent install so its quite clean. Not using a proxy to connect to the internet. Well at least I know the problem is most likely on my end since no one else is complaining about it.

The error will come up suddenly and will sometimes go away when I restart the browser.

 

[Ryan Smith]

Next time it happens, please run "nslookup forums.anandtech.com" and post that here, so that I can see which specific box you're hitting. It may yet be us.

 

[bononos]

I don't have trouble logging into any other https websites like facebook, banking websites. I checked things like - rcc scan for fake root certs, verified certificate hashes from twitter/facebook/google and they match, no web shield type av programs which interfere with https.

Restarting the browser doesn't help. The problem seems to occur intermittently after a while. I've set the adapter settings to use google dns.

C:\Temp>nslookup forums.anandtech.com
Server:  google-public-dns-a.google.com
Address:  8.8.8.8

Non-authoritative answer:
Name:    e12200.e12.akamaiedge.net
Addresses:  58.27.118.44
          58.27.124.244
Aliases:  forums.anandtech.com
          forums.anandtech.com.edgekey.net

C:\Windows\System32>nslookup forum.anandtech.com
Server:  google-public-dns-a.google.com
Address:  8.8.8.8

Non-authoritative answer:
Name:    forum.anandtech.com
Address:  192.65.241.100

C:\Windows\System32>nslookup www.anandtech.com
Server:  google-public-dns-a.google.com
Address:  8.8.8.8

Non-authoritative answer:
Name:    www.anandtech.com
Address:  192.65.241.100

 

[TheRyuu]

I assume everything on the client side[1] looks good?

[1] https://www.ssllabs.com/ssltest/viewMyClient.html

 

[Schmide]

I got it too. Added an exception. Got 2 A on the test.

 

[bononos]

I think my issue might be the same as the slow browsing speed that others are complaining about especially during the night when there is more AT database work going on.



Edit- Nope. Still having the issue on and off all the time.