[SOLVED] problem update 1.5.1.23 to 1.6

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
cdeze
Messages: 31
Registration: Nov 29, 2016 - 09:39

September 26, 2018 - 2:19 PM

I get this error message
Can you tell me if this resonates with you?
THANKS

Code: Select all

root@wapt:~# apt-get update
Hit:1 http://security.debian.org/debian-security stretch/updates InRelease
Ign:2 http://cdn-fastly.deb.debian.org/debian stable InRelease
Ign:3 http://cdn-fastly.deb.debian.org/debian stable-update InRelease
Hit:4 http://cdn-fastly.deb.debian.org/debian stable Release
Ign:5 https://wapt.tranquil.it/debian/wapt-1.6 stretch InRelease
Ign:6 http://cdn-fastly.deb.debian.org/debian stable-update Release
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Ign:9 http://deb.debian.org/debian stable-update/main amd64 Packages
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://deb.debian.org/debian stable-update/main Translation-en
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:11 http://deb.debian.org/debian stable-update/main Translation-fr
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:12 https://wapt.tranquil.it/debian/wapt-1.6 stretch Release
Ign:13 http://deb.debian.org/debian stable-update/main Translation-en_US
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:14 http://deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:15 http://deb.debian.org/debian stable-update/contrib all Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://deb.debian.org/debian stable-update/contrib Translation-en
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:18 http://deb.debian.org/debian stable-update/contrib Translation-fr
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
Ign:20 http://deb.debian.org/debian stable-update/non-free all Packages
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:21 http://deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:22 http://deb.debian.org/debian stable-update/non-free Translation-fr
Ign:22 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-fr
Ign:23 http://deb.debian.org/debian stable-update/non-free Translation-en
Ign:23 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en
Ign:24 http://deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:24 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:9 http://deb.debian.org/debian stable-update/main amd64 Packages
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://deb.debian.org/debian stable-update/main Translation-en
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:11 http://deb.debian.org/debian stable-update/main Translation-fr
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:13 http://deb.debian.org/debian stable-update/main Translation-en_US
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:14 http://deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:15 http://deb.debian.org/debian stable-update/contrib all Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://deb.debian.org/debian stable-update/contrib Translation-en
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:18 http://deb.debian.org/debian stable-update/contrib Translation-fr
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:20 http://deb.debian.org/debian stable-update/non-free all Packages
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:21 http://deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:22 http://deb.debian.org/debian stable-update/non-free Translation-fr
Ign:22 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-fr
Ign:23 http://deb.debian.org/debian stable-update/non-free Translation-en
Ign:23 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en
Ign:24 http://deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:24 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Ign:9 http://deb.debian.org/debian stable-update/main amd64 Packages
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://deb.debian.org/debian stable-update/main Translation-en
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:11 http://deb.debian.org/debian stable-update/main Translation-fr
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:13 http://deb.debian.org/debian stable-update/main Translation-en_US
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:14 http://deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:15 http://deb.debian.org/debian stable-update/contrib all Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://deb.debian.org/debian stable-update/contrib Translation-en
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:18 http://deb.debian.org/debian stable-update/contrib Translation-fr
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:20 http://deb.debian.org/debian stable-update/non-free all Packages
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:21 http://deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:22 http://deb.debian.org/debian stable-update/non-free Translation-fr
Ign:22 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-fr
Ign:23 http://deb.debian.org/debian stable-update/non-free Translation-en
Ign:23 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en
Ign:24 http://deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:24 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Ign:9 http://deb.debian.org/debian stable-update/main amd64 Packages
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://deb.debian.org/debian stable-update/main Translation-en
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Ign:11 http://deb.debian.org/debian stable-update/main Translation-fr
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:13 http://deb.debian.org/debian stable-update/main Translation-en_US
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:14 http://deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:15 http://deb.debian.org/debian stable-update/contrib all Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://deb.debian.org/debian stable-update/contrib Translation-en
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
Ign:18 http://deb.debian.org/debian stable-update/contrib Translation-fr
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:20 http://deb.debian.org/debian stable-update/non-free all Packages
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:21 http://deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:22 http://deb.debian.org/debian stable-update/non-free Translation-fr
Ign:22 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-fr
Ign:23 http://deb.debian.org/debian stable-update/non-free Translation-en
Ign:23 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en
Ign:24 http://deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:24 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Ign:9 http://deb.debian.org/debian stable-update/main amd64 Packages
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://deb.debian.org/debian stable-update/main Translation-en
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:11 http://deb.debian.org/debian stable-update/main Translation-fr
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:13 http://deb.debian.org/debian stable-update/main Translation-en_US
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:14 http://deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:15 http://deb.debian.org/debian stable-update/contrib all Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://deb.debian.org/debian stable-update/contrib Translation-en
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:18 http://deb.debian.org/debian stable-update/contrib Translation-fr
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:20 http://deb.debian.org/debian stable-update/non-free all Packages
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:21 http://deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Ign:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
Ign:22 http://deb.debian.org/debian stable-update/non-free Translation-fr
Ign:22 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-fr
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:23 http://deb.debian.org/debian stable-update/non-free Translation-en
Ign:23 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en
Ign:24 http://deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:24 http://cdn-fastly.deb.debian.org/debian stable-update/non-free Translation-en_US
Ign:7 http://deb.debian.org/debian stable-update/main all Packages
Ign:7 http://cdn-fastly.deb.debian.org/debian stable-update/main all Packages
Err:9 http://deb.debian.org/debian stable-update/main amd64 Packages
  404  Not Found
Ign:9 http://cdn-fastly.deb.debian.org/debian stable-update/main amd64 Packages
Ign:10 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en
Ign:11 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-fr
Ign:13 http://cdn-fastly.deb.debian.org/debian stable-update/main Translation-en_US
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:14 http://cdn-fastly.deb.debian.org/debian stable-update/contrib amd64 Packages
Ign:15 http://cdn-fastly.deb.debian.org/debian stable-update/contrib all Packages
Ign:16 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en_US
Ign:17 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-en
Ign:18 http://cdn-fastly.deb.debian.org/debian stable-update/contrib Translation-fr
Ign:20 http://cdn-fastly.deb.debian.org/debian stable-update/non-free all Packages
Ign:21 http://cdn-fastly.deb.debian.org/debian stable-update/non-free amd64 Packages
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Ign:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Ign:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Err:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
  gnutls_handshake() failed: Error in the pull function.
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Reading package lists... Done
W: The repository 'http://deb.debian.org/debian stable-update Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'https://wapt.tranquil.it/debian/wapt-1.6 stretch Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://deb.debian.org/debian/dists/stable-update/main/binary-amd64/Packages  404  Not Found
E: Failed to fetch https://wapt.tranquil.it/debian/wapt-1.6/dists/stretch/main/binary-amd64/Packages  gnutls_handshake() failed: Error in the pull function.
E: Some index files failed to download. They have been ignored, or old ones used instead.
High
User avatar
dcardon
WAPT Expert
Messages: 1930
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :
Contact dcardon

September 26, 2018 - 3:13 PM

Hello cdeze,
cdeze wrote: ↑September 26, 2018 - 2:19 PM I get this error message
Can you tell me if this resonates with you?
THANKS

Code: Select all

root@wapt:~# apt-get update
Hit:1 http://security.debian.org/debian-security stretch/updates InRelease
Ign:2 http://cdn-fastly.deb.debian.org/debian stable InRelease
Ign:3 http://cdn-fastly.deb.debian.org/debian stable-update InRelease
.....
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Err:19 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main amd64 Packages
  gnutls_handshake() failed: Error in the pull function.
Ign:25 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main all Packages
Ign:26 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en
Ign:27 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-en_US
Ign:28 https://wapt.tranquil.it/debian/wapt-1.6 stretch/main Translation-fr
Reading package lists... Done
W: The repository 'http://deb.debian.org/debian stable-update Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'https://wapt.tranquil.it/debian/wapt-1.6 stretch Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://deb.debian.org/debian/dists/stable-update/main/binary-amd64/Packages  404  Not Found
E: Failed to fetch https://wapt.tranquil.it/debian/wapt-1.6/dists/stretch/main/binary-amd64/Packages  gnutls_handshake() failed: Error in the pull function.
E: Some index files failed to download. They have been ignored, or old ones used instead.
I think you're having a problem with your APT download... Could you check your proxy? Is there any man-in-the-middle (MITM) attack using a wildcard certificate on your proxy?

Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
High
cdeze
Messages: 31
Registration: Nov 29, 2016 - 09:39

September 26, 2018 - 4:03 PM

Good morning
No MITM, but rather a proxy that must not know a cipher or an SSL version

FYI

Code: Select all

root@wapt:~# curl -vv https://wapt.tranquil.it/
*   Trying 100.78.56.201...
* TCP_NODELAY set
* Connected to (nil) (100.78.56.201) port 8001 (#0)
* Establish HTTP proxy tunnel to wapt.tranquil.it:443
> CONNECT wapt.tranquil.it:443 HTTP/1.1
> Host: wapt.tranquil.it:443
> User-Agent: curl/7.52.1
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection established
<
* Proxy replied OK to CONNECT request
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* Unknown SSL protocol error in connection to wapt.tranquil.it:443
* Curl_http_done: called premature == 1
* stopped the pause stream!
* Closing connection 0
curl: (35) Unknown SSL protocol error in connection to wapt.tranquil.it:443
High
cdeze
Messages: 31
Registration: Nov 29, 2016 - 09:39

September 26, 2018 - 4:12 PM

I think my proxy only allows TLS 1.3 and your server doesn't have that protocol
. Am I wrong?
High
User avatar
dcardon
WAPT Expert
Messages: 1930
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :
Contact dcardon

September 26, 2018 - 4:16 PM

Hello Cdeze,
cdeze wrote: ↑Sep 26, 2018 - 4:12 PM I think my proxy only allows TLS 1.3 and your server doesn't have this protocol
. Am I wrong?
I think your proxy doesn't support TLS 1.2... If your proxy only accepts TLS 1.3, it won't be able to connect to much! :-)

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
High
cdeze
Messages: 31
Registration: Nov 29, 2016 - 09:39

September 26, 2018 - 4:22 PM

Yet he does:

Code: Select all

root@wapt:~# curl -vv https://forum.tranquil.it/
*   Trying 100.78.56.201...
* TCP_NODELAY set
* Connected to (nil) (100.78.56.201) port 8001 (#0)
* Establish HTTP proxy tunnel to forum.tranquil.it:443
> CONNECT forum.tranquil.it:443 HTTP/1.1
> Host: forum.tranquil.it:443
> User-Agent: curl/7.52.1
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection established
<
* Proxy replied OK to CONNECT request
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: OU=Domain Control Validated; OU=Gandi Standard Wildcard SSL; CN=*.tranquil.it
*  start date: May 25 00:00:00 2018 GMT
*  expire date: Jun  8 23:59:59 2020 GMT
*  subjectAltName: host "forum.tranquil.it" matched cert's "*.tranquil.it"
*  issuer: C=FR; ST=Paris; L=Paris; O=Gandi; CN=Gandi Standard SSL CA 2
*  SSL certificate verify ok.
High
User avatar
dcardon
WAPT Expert
Messages: 1930
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :
Contact dcardon

September 26, 2018 - 5:21 PM

Hello cdeze,
cdeze wrote: ↑September 26, 2018 - 4:22 PM Yet he does:

Code: Select all

...
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
...
*  SSL certificate verify ok.
We're also using a proxy; I have the same TLS and cipher in both cases... I admit I don't understand...

[dcardon@srvlts1.ad.tranq ~]$ curl -vv https://wapt.tranquil.it/
* Trying 192.168.149.13...
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384

[dcardon@srvlts1.ad.tranq ~]$ curl -vv https://forum.tranquil.it/
* Trying 192.168.149.13...
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384

Simon told me that, in the worst-case scenario, you can always download the .deb files using your browser and install them with dpkg... :-)

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
High
cdeze
Messages: 31
Registration: Nov 29, 2016 - 09:39

September 27, 2018 - 08:46

The problem stemmed from our filtering at Bluecoat, which had flagged the site as suspicious.
Sorry
High
User avatar
dcardon
WAPT Expert
Messages: 1930
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :
Contact dcardon

October 2, 2018 - 8:04 PM

Hello Cdeze,
cdeze wrote: ↑Sep 27, 2018 - 8:46 AM The problem came from our filtering at Bluecoat, which had flagged the site as suspicious.
Sorry
Thanks for the feedback, I'm marking the topic as [RESOLVED]

Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
High
Locked

Return to "WAPT Server"


  • To go further with WAPT