DFE - School to School SSL Error

[ITJAY2023]

Hi All,

 

We've had two reports regarding not being able to go into School to School from the DFE gateway.

 

The error message is

 

the site can't provide a secure connection err_ssl_version_or_cipher_mismatch

 

Has anyone else seen this message or have a solution?

[BlueSkies]

We saw this in our school office yesterday when they were using Google Chrome. I suggested they try it using Edge ...and it worked. Not a solution ... but a workaround for now!

[ITJAY2023]

Haha yeah, thought so thats exactly what we've done

[PrimaryNetMan]

Yes started seeing this yesterday. Error in chrome but not in edge. Also to make it more confusing, on another machines works fine. Both identical, both fully patched.

[rob_coles]

We’ve seen this pop up on a couple of devices today, suspect it’s to do with ssl intercept on our smoothwall.

 

Got a ticket open with sw see what they can do.

 

Again using edge as a work around.

[XiJ]

Also seeing it securly. One of our techs thought it was the dfe end. But I haven’t looked into it myself.

[PrimaryNetMan]

Enabling the following flag fixes the issue

 

chrome://flags/#use-sha1-server-handshakes

 

It will reduce your browsers security though.

[Michael]

Morning all,

 

I resolved this issue for a user earlier this week - I reset Internet Options > Advanced to defaults, then uninstall Chrome on the workstation and re-install/update and it worked.

[rob_coles]

Just a bit of an update.

 

Smoothwall taken a look, appears to be an issue with Sophos web control.

 

Turning web control off and chrome works perfectly.

 

Only a handful of clients with this and they are using edge for the time being as I’m not comfortable turning it off.