Page 1 of 2 12 LastLast
Results 1 to 10 of 18
  1. #1
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default Google Abandoned

    Is anyone else seeing abandoned Google sessions today?

    All other search engines and https sites appear to work fine.

    Just started today from what I can tell.


    SSL inspector says it's using rule 0 for google, but my inspect google rule is ID 10.

    I don't have a rule ID 0. Am I trying to inspect Google incorrectly?

    Still working on this too. Will edit as I go.

    ERR_Connection_Closed shows in the client browser.
    Last edited by skearton; 02-09-2018 at 01:19 PM.

  2. #2
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default

    Chrome, Edge, and Firefox face the same issue. Disabling ssl inspector allows Google to work, but when re-enabled Google is disabled again, even if I untick the "Inspect Google" that I had created.

    My root cert is still working fine with other ssl sites. Only getting rejected by google.

    ssl inspect.PNG

    cert abandoned.PNG

  3. #3
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default

    untangle request.PNG

    untangle request2.PNG


    I've tried switching to SSL: Cert Issuer and SSL: Cert subject rather than SNI

    I still see abandoned, rule 0 no matter which way I switch it around.

    Disabling SSL inspector allows google to work properly.

  4. #4
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,177

    Default

    You will need to look at the cert coming from that IP.
    You can do so in chrome or with a variety of tools.
    If the cert is from google it should be accepted, if its from someone else something funky is going on...

    abandoned means that SSL inspector abandoned the session because it did not trust the certificate presented from the server.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default

    unt req3.PNG

    unt tls.PNG

    unt4.PNG

    unt5.PNG

    When SSL inspector is off, the google cert looks to be normal. Is that what you mean?

    Thank you for your assistance.

  6. #6
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,177

    Default

    run this on untangle:
    echo | openssl s_client -showcerts -connect 172.217.6.110:443 2>|/dev/null | openssl x509 -inform pem -noout -text
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Untangler
    Join Date
    Aug 2016
    Posts
    34

  8. #8
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default

    Do I need to have an "Ignore all other traffic, or block all other traffic" enabled? Is it mandatory, and maybe I unticked it at some point?

  9. #9
    Untangler
    Join Date
    Aug 2016
    Posts
    34

    Default

    I've verified that the CA for untangle is present in

    ConsoleRoot\Certificates\(local computer)TrustedRootAuthorities\Certificates

  10. #10
    Untanglit bluechris's Avatar
    Join Date
    May 2016
    Posts
    29

    Default

    I don't have ssl inspector enabled in company but something strange is happening since yesterday because in work the last 2 days i got in all the terminals of my users (25) popups to allow our not allow connections to Google from eset. I haven't figured why and after too much ball breaking in phones i ended up to configure all the eset installations to never ask and always block the suspicious site from Google.
    It was something from adservices from Google i think but even after the block all working fine.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2