Google - Not secure - your connection is not private

[duzzie]

Hi, seem to be having an issue in one of our IT suites with Google. I keep getting Not secure and your connection is not private. All was working yesterday, strangely a couple of the machines don't seen to be affected even though they are all the same build and same OU. Has anyone any ideas please? tried rebooting firewall, rebooting computers but no joy.

[enjay]

Proxy certificates?

[mjk]

HTTPS inspection turned on? I'm pretty sure that would trigger a "your connection is not private" alert.

[duzzie]

Sorry early finish yesterday, everything you have mentioned seems ok. I have watched both computers on the firewall (one that works and one that doesn't) and the only difference I can see when opening the same page is the one that works connects to https://ssl.gstatic.com and the one that doesn't connects to https://clients2.google.com.

 

Like I said they are both in the same computer room so same policy's been applied and both have the same chrome build. Tried using IE and connects to google sites without a problem. I might give Smoothwall a ring and see if they have any ideas.

[enjay]

Like I said they are both in the same computer room so same policy's been applied and both have the same chrome build.

Probably worth checking that, and doing a gpupdate/force for good measure.

 

Tried using IE and connects to google sites without a problem. I might give Smoothwall a ring and see if they have any ideas.

We had that with some of our PCs. Chrome through an error but if you opened IE it was fine. Bizarrely, if you opened IE and then opened Chrome, Chrome was also fine. The PCs stopped doing it before I could work out why!

[Stormborn15]

Just picking this issue up on a rebuild of a macbook.. installed Chrome - safari working fine via proxy and protex cert, and google can be accessed from safari, but not directly from google chrome install... any one got the bottom of this yet?..

 

Rebuilt an imac yesterday and no issues with this at all.. this the macbook today... TIA

[duzzie]

I have logged my issue with Smoothwall, when I find out I will let you know.

[duzzie]

Probably worth checking that, and doing a gpupdate/force for good measure.

 

 

We had that with some of our PCs. Chrome through an error but if you opened IE it was fine. Bizarrely, if you opened IE and then opened Chrome, Chrome was also fine. The PCs stopped doing it before I could work out why!

 

Tried gpupdate and rebooting a few times and still the same. Works ok on Admin computers so applied the Admin Chrome policy and still the same error. Very strange.

[Stormborn15]

I have logged my issue with Smoothwall, when I find out I will let you know.

I've also logged a call with our ISP provider- will do the same if they come back..

[gshaw]

Hit F12 on an affected machine then go to Security tab. You will see what certificate is triggering the error.

 

Also what build of Chrome are you running? Seems v57 onwards are causing issues by some of the SSL changes that have been implemented.

[Mattjstmarys]

We have now got this issue after Google Chrome has auto updated to 58. We are using a Sophos UTM and they are aware of the error:

 

https://community.sophos.com/products/unified-threat-management/f/general-discussion/91085/https-scanning-web-protection-ssl-error-err_cert_common_name_invalid/330113

 

https://bugs.chromium.org/p/chromium/issues/detail?id=700595&desc=2#c20

[Tesla]

This was mentioned by me on the annoying things thread yesterday and is apparently down to SHA1 being used to sign SSL certificates. Looks like the fix might be a new certificate being assigned everywhere.

[DJ-1701]

This was mentioned by me on the annoying things thread yesterday and is apparently down to SHA1 being used to sign SSL certificates. Looks like the fix might be a new certificate being assigned everywhere.

 

Yeah, basically seems the same as this I had at the end of March.

 

http://www.edugeek.net/forums/internet-related-filtering-firewall/182162-https-interception-issues-using-google-chrome-57-a.html#post1564404

 

Certificate for HTTPS intercepts (or if you aren't using that, the website you are accessing) needs to be updated to work correctly in Chrome. Internet Explorer should work though.

[Tesla]

As a general rule Internet Explorer doesn't work though ha.

[Mattjstmarys]

We have now bypassed this error as it was discussed in comment 24 of this link: https://bugs.chromium.org/p/chromium/issues/detail?id=700595&desc=2#c24

 

Google have said that by Version 64 this setting will no longer be available but i am sure by that point Sophos/smoothwall would have fixed the SHA1 Certificate issue.

[rogerdnixon]

You might want to consider running a few devices on the beta/dev channel and then you get a month or so notice of these changes and issues. I spotted this about 4 weeks ago and reported it to Securly and it was fixed (certificate update their end) before the stable release yesterday. However, you would have thought Sophos and the likes would be doing this anyways.

[gshaw]

You might want to consider running a few devices on the beta/dev channel and then you get a month or so notice of these changes and issues. I spotted this about 4 weeks ago and reported it to Securly and it was fixed (certificate update their end) before the stable release yesterday. However, you would have thought Sophos and the likes would be doing this anyways.

You'd hope that with the money we're paying for "support" these suppliers should be doing the R&D work rather than us but good suggestion nonetheless

[Stormborn15]

@elsiegee40 - this is the Google chrome thread

[Stormborn15]

My ISP has emailed to say that they have resolved the issue for us..

[Tesla]

My ISP has emailed to say that they have resolved the issue for us..

 

Who's your ISP (if you dont mind my asking)? It seems better for us but nothing has been confirmed.

[Stormborn15]

Who's your ISP (if you dont mind my asking)? It seems better for us but nothing has been confirmed.

We are with E2BN- professional day today - so still need to check with the affected teacher if this has now been resolved...

[Tesla]

Thanks. That's ours too! Good to know.

[Stormborn15]

Thanks. That's ours too! Good to know.

 

Just checked with teacher and she has confirmed that her Google Chrome is now working ok

[tberty]

Hi, seem to be having an issue in one of our IT suites with Google. I keep getting Not secure and your connection is not private. All was working yesterday, strangely a couple of the machines don't seen to be affected even though they are all the same build and same OU. Has anyone any ideas please? tried rebooting firewall, rebooting computers but no joy.

 

In case you haven't resolved it yet, I found this one in Google, which has many solutions to follow:

 

https://usefulpcguide.com/16666/your-connection-is-not-private/

[gshaw]

Although we have an idea where our particular issue lies it's odd that Google and Google get the error but google.ie, google.fr etc. work fine. Very strange!