Problem with ssl and tls, looking for help

[Green Baron]

Hi guys,

expecting that there are some specialists here i allow myself to ask for help because it is of some urgency to me.

I try to load these pages: sanitas.es/misanitas (no, i am not sick, but switching companies and need to cancel the old one, or i'll pay double ...), but all i get is a protocol error with no way to to load the page, to work around or to force the browser to just do it. It is a link i got from the letter of the insurance company.

I tried Firefox version 3.6, 45.6 (Iceweasel), 49 and 50 under Debian 8.6, Ubuntu 16.10 and Windows 7), i tried Opera stable (Debian 8.6 and Windows 7), i even installed Chromium (current version and repository version under Debian 8.6 and Windows 7) and an old version of the Internet Explorer (the one from Windows 7 SP1) but nothing works.

All i get is either an ERR_SSL_ERROR_NO_CYPHER_OVERLAP or the message that the server has reset the connection while loading the page. I messed in firefox with the about:config settings for tls and ssl as described in various forums on the internet or the firefox support pages, but nothing works.

I have seen the page loading on the insurance agents computer, so this might be a problem in my network.

Any ideas ?

Cheers

gb

 

[steve_v]

1 hour ago, Green Baron said:

sanitas.es/misanitas

404.

https://sanitas.es loads fine for me, Firefox 45.6.0 (ESR), Debian 8.6.
ca-certificates up to date? No local changes to system ssl config? No proxy?

Edited December 27, 2016 by steve_v

[Green Baron]

Hello steve_v,

thank you for the quick reply. So get a page not found ?

Well, i even installed a brand new Ubuntu 16.10, without any changes, the page will not load. https://sanitas.es does not load, connection reset, www.sanitas.es loads without styles and resources (pictures, etc.). No proxy in my network.

Will try with the tablet from one of the bars in town ...

Edit: works outside. must be a problem of the provider ...

 

Edited December 27, 2016 by Green Baron

[pxi]

Seems to work here.  Website does seem a little slow loading in everything, but it seems to get there eventually.  Nslookup tells me the site is at 195.235.245.20

Doesn't seem to be using https:// though, even trying to force a connection through the address bar seems to return the unencrypted site.

 

1 hour ago, Green Baron said:

https://sanitas.es

...links to sabitas.es btw.  Probably just a typo, but might be worth pointing out.

Edited December 27, 2016 by pxi

[steve_v]

Nevermind.

Edited December 27, 2016 by steve_v
Read, read properly.

[pxi]

1 minute ago, steve_v said:

Very odd, I typed it as seen, forum auto-linkified it. I blame this silly new forum software. Fixed anyways.

I was referring to green baron's link actually, in the post directly above my first post.

[steve_v]

1 hour ago, Green Baron said:

Edit: works outside. must be a problem of the provider ...

So it works from another connection, but not your own ISP?
That tends to imply that your ISP is routing you through a transparent proxy and/or tampering with ssl data... do they do Ad/pr0n filtering? Either that or your router is doing something very silly.
Out of curiosity, can you load it when connected through an SSH tunnel or VPN?

Edited December 27, 2016 by steve_v

[Green Baron]

Hi,

thanks all for the help.

The typo b instead of n probably happened when the forum editor added the link automatically when i typed it but didn't correct the link when i backspaced and corrected my typing. My router isn't clever enough, but it is behind the providers router (special satellite thingy) that i have no information about.

Now i had to learn first what ad/pr0n means. I doubt it, but i didn't try it out. At least not willingly, if you know what i mean :-). Up to now i never had a problem with ssl-connections and this is the only site that doesn't work (that i now know of ...). I would guess that a proxy i wasn't told of is in the way.

I have no vpn-software (read: knowledge :-)). And i sadly have no outside ssh server i could tunnel over ...

Looks like i'll have to do the communication with that site from out of the pub. Until terrestrial internet finds a way to my place.

 

[steve_v]

1 hour ago, Green Baron said:

I have no vpn-software (read: knowledge :-)). And i sadly have no outside ssh server i could tunnel over ...

You could also try TOR