duzzie Posted April 19, 2017 Posted April 19, 2017 Hi, seem to be having an issue in one of our IT suites with Google. I keep getting Not secure and your connection is not private. All was working yesterday, strangely a couple of the machines don't seen to be affected even though they are all the same build and same OU. Has anyone any ideas please? tried rebooting firewall, rebooting computers but no joy.
mjk Posted April 19, 2017 Posted April 19, 2017 HTTPS inspection turned on? I'm pretty sure that would trigger a "your connection is not private" alert.
duzzie Posted April 20, 2017 Author Posted April 20, 2017 Sorry early finish yesterday, everything you have mentioned seems ok. I have watched both computers on the firewall (one that works and one that doesn't) and the only difference I can see when opening the same page is the one that works connects to https://ssl.gstatic.com and the one that doesn't connects to https://clients2.google.com. Like I said they are both in the same computer room so same policy's been applied and both have the same chrome build. Tried using IE and connects to google sites without a problem. I might give Smoothwall a ring and see if they have any ideas.
enjay Posted April 20, 2017 Posted April 20, 2017 Like I said they are both in the same computer room so same policy's been applied and both have the same chrome build. Probably worth checking that, and doing a gpupdate/force for good measure. Tried using IE and connects to google sites without a problem. I might give Smoothwall a ring and see if they have any ideas. We had that with some of our PCs. Chrome through an error but if you opened IE it was fine. Bizarrely, if you opened IE and then opened Chrome, Chrome was also fine. The PCs stopped doing it before I could work out why!
Stormborn15 Posted April 20, 2017 Posted April 20, 2017 Just picking this issue up on a rebuild of a macbook.. installed Chrome - safari working fine via proxy and protex cert, and google can be accessed from safari, but not directly from google chrome install... any one got the bottom of this yet?.. Rebuilt an imac yesterday and no issues with this at all.. this the macbook today... TIA
duzzie Posted April 20, 2017 Author Posted April 20, 2017 I have logged my issue with Smoothwall, when I find out I will let you know.
duzzie Posted April 20, 2017 Author Posted April 20, 2017 Probably worth checking that, and doing a gpupdate/force for good measure. We had that with some of our PCs. Chrome through an error but if you opened IE it was fine. Bizarrely, if you opened IE and then opened Chrome, Chrome was also fine. The PCs stopped doing it before I could work out why! Tried gpupdate and rebooting a few times and still the same. Works ok on Admin computers so applied the Admin Chrome policy and still the same error. Very strange.
Stormborn15 Posted April 20, 2017 Posted April 20, 2017 I have logged my issue with Smoothwall, when I find out I will let you know. I've also logged a call with our ISP provider- will do the same if they come back..
gshaw Posted April 21, 2017 Posted April 21, 2017 Hit F12 on an affected machine then go to Security tab. You will see what certificate is triggering the error. Also what build of Chrome are you running? Seems v57 onwards are causing issues by some of the SSL changes that have been implemented.
Mattjstmarys Posted April 21, 2017 Posted April 21, 2017 We have now got this issue after Google Chrome has auto updated to 58. We are using a Sophos UTM and they are aware of the error: https://community.sophos.com/products/unified-threat-management/f/general-discussion/91085/https-scanning-web-protection-ssl-error-err_cert_common_name_invalid/330113 https://bugs.chromium.org/p/chromium/issues/detail?id=700595&desc=2#c20 1
Tesla Posted April 21, 2017 Posted April 21, 2017 This was mentioned by me on the annoying things thread yesterday and is apparently down to SHA1 being used to sign SSL certificates. Looks like the fix might be a new certificate being assigned everywhere.
DJ-1701 Posted April 21, 2017 Posted April 21, 2017 This was mentioned by me on the annoying things thread yesterday and is apparently down to SHA1 being used to sign SSL certificates. Looks like the fix might be a new certificate being assigned everywhere. Yeah, basically seems the same as this I had at the end of March. http://www.edugeek.net/forums/internet-related-filtering-firewall/182162-https-interception-issues-using-google-chrome-57-a.html#post1564404 Certificate for HTTPS intercepts (or if you aren't using that, the website you are accessing) needs to be updated to work correctly in Chrome. Internet Explorer should work though.
Tesla Posted April 21, 2017 Posted April 21, 2017 As a general rule Internet Explorer doesn't work though ha.
Mattjstmarys Posted April 21, 2017 Posted April 21, 2017 We have now bypassed this error as it was discussed in comment 24 of this link: https://bugs.chromium.org/p/chromium/issues/detail?id=700595&desc=2#c24 Google have said that by Version 64 this setting will no longer be available but i am sure by that point Sophos/smoothwall would have fixed the SHA1 Certificate issue.
rogerdnixon Posted April 21, 2017 Posted April 21, 2017 You might want to consider running a few devices on the beta/dev channel and then you get a month or so notice of these changes and issues. I spotted this about 4 weeks ago and reported it to Securly and it was fixed (certificate update their end) before the stable release yesterday. However, you would have thought Sophos and the likes would be doing this anyways. 1
gshaw Posted April 21, 2017 Posted April 21, 2017 You might want to consider running a few devices on the beta/dev channel and then you get a month or so notice of these changes and issues. I spotted this about 4 weeks ago and reported it to Securly and it was fixed (certificate update their end) before the stable release yesterday. However, you would have thought Sophos and the likes would be doing this anyways. You'd hope that with the money we're paying for "support" these suppliers should be doing the R&D work rather than us but good suggestion nonetheless
Stormborn15 Posted April 21, 2017 Posted April 21, 2017 @elsiegee40 - this is the Google chrome thread
Stormborn15 Posted April 21, 2017 Posted April 21, 2017 My ISP has emailed to say that they have resolved the issue for us..
Tesla Posted April 24, 2017 Posted April 24, 2017 My ISP has emailed to say that they have resolved the issue for us.. Who's your ISP (if you dont mind my asking)? It seems better for us but nothing has been confirmed.
Stormborn15 Posted April 24, 2017 Posted April 24, 2017 Who's your ISP (if you dont mind my asking)? It seems better for us but nothing has been confirmed. We are with E2BN- professional day today - so still need to check with the affected teacher if this has now been resolved... 1
Stormborn15 Posted April 24, 2017 Posted April 24, 2017 Thanks. That's ours too! Good to know. Just checked with teacher and she has confirmed that her Google Chrome is now working ok
tberty Posted April 25, 2017 Posted April 25, 2017 Hi, seem to be having an issue in one of our IT suites with Google. I keep getting Not secure and your connection is not private. All was working yesterday, strangely a couple of the machines don't seen to be affected even though they are all the same build and same OU. Has anyone any ideas please? tried rebooting firewall, rebooting computers but no joy. In case you haven't resolved it yet, I found this one in Google, which has many solutions to follow: https://usefulpcguide.com/16666/your-connection-is-not-private/
gshaw Posted April 25, 2017 Posted April 25, 2017 Although we have an idea where our particular issue lies it's odd that Google and Google get the error but google.ie, google.fr etc. work fine. Very strange!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now