Re: SSL routines:tls_process_client_hello:version too low

2020-10-17 Thread jriker1
Thanks for the reply. Only thing I can do to get it back where it was, which I honestly really can't do, is remove whatever patches on my Windows servers have installed since 8 months ago when it worked, and try and revert to a prior version of NGINX which I'm really not sure what version I was on

Re: SSL routines:tls_process_client_hello:version too low

2020-10-05 Thread Anna Lewis
Hi, Can you please remove me from this mailing list? I'm not sure how I got added. Thanks, Anna On Mon, Oct 5, 2020 at 5:39 AM Francis Daly wrote: > On Wed, Sep 30, 2020 at 04:39:03PM -0400, jriker1 wrote: > > Hi there, > > > Not sure if they are relevant but went thru the entire log. Found t

Re: SSL routines:tls_process_client_hello:version too low

2020-10-05 Thread Francis Daly
On Wed, Sep 30, 2020 at 04:39:03PM -0400, jriker1 wrote: Hi there, > Not sure if they are relevant but went thru the entire log. Found these > references. Guessing related but not sure they tell me personally > anything: These logs do seem to indicate that the tls-negotiation part of things i

Re: SSL routines:tls_process_client_hello:version too low

2020-09-30 Thread jriker1
Not sure if they are relevant but went thru the entire log. Found these references. Guessing related but not sure they tell me personally anything: 2020/09/30 09:56:48 [debug] 17117#17117: *7 http run request: "/remoteDesktopGateway/?" 2020/09/30 09:56:48 [debug] 17117#17117: *7 http upstream c

Re: SSL routines:tls_process_client_hello:version too low

2020-09-30 Thread jriker1
I thought I could fix it by adding the below into the servr block for remote.* but didn't help: ssl_dhparam /config/user-data/dhparam.pem; ssl_protocols TLSv1 TLSV1.1 TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-

Re: SSL routines:tls_process_client_hello:version too low

2020-09-29 Thread jriker1
Thanks for the replies. I can't debug right now as at a hotel and can't turn on NGINX as if/when it fails I won't be able to access my servers again so will do that later this week however right now I am on NGINX 1.14.1. Essentials Server 2016 is basically RD Gateway. My configuration right now

Re: SSL routines:tls_process_client_hello:version too low

2020-09-29 Thread Francis Daly
On Tue, Sep 29, 2020 at 05:06:32PM -0400, jriker1 wrote: Hi there, > Thanks. Only thing I can see in a Wireshark trace is TLS 1.2 so shouldn't > be an issue from what I can see but who knows. > > So it works without NGINX but that said couple things. > > 1. Is there a way to just make NGINX ac

Re: SSL routines:tls_process_client_hello:version too low

2020-09-29 Thread Sergey Kandaurov
> On 28 Sep 2020, at 23:12, jriker1 wrote: > > Hope I can post this as Chrome keeps complaining this site has a data > breach. The primary interface is using mailing lists: http://nginx.org/en/support.html > > I have been using NGINX to route my 443 traffic for two servers for a while > now.

Re: SSL routines:tls_process_client_hello:version too low

2020-09-29 Thread jriker1
Thanks. Only thing I can see in a Wireshark trace is TLS 1.2 so shouldn't be an issue from what I can see but who knows. So it works without NGINX but that said couple things. 1. Is there a way to just make NGINX accept things and work? Way to prove it's a TLS issue then? 2. What would have cha

Re: SSL routines:tls_process_client_hello:version too low

2020-09-29 Thread Francis Daly
On Mon, Sep 28, 2020 at 06:12:24PM -0400, jriker1 wrote: Hi there, > What I get in the error logs when this happens is: > > 2020/09/28 05:09:50 [crit] 7556#7556: *1366 SSL_do_handshake() failed (SSL: > error:1417D18C:SSL routines:tls_process_client_hello:version too low) while > SSL handshaking,

SSL routines:tls_process_client_hello:version too low

2020-09-28 Thread jriker1
Hope I can post this as Chrome keeps complaining this site has a data breach. I have been using NGINX to route my 443 traffic for two servers for a while now. Now I can't get my RDP side of things working. Not sure why as it used to work. RDP is thru Essentials Server 2016 and it's Remote Web A