User Tools

Site Tools


pfsense:troubleshooting:ssl_error_rx_record_too_long

This is an old revision of the document!


PFSense - Troubleshooting - SSL_ERROR_RX_RECORD_TOO_LONG

Getting the error SSL_ERROR_RX_RECORD_TOO_LONG when attempting to access multiple different sites, sometimes goes away with refresh but sometimes persists.

Usually when using Squid option of Splice All for SSL/MITM Mode.

Can't connect to 192.168.1.1:443 (certificate verify failed)

SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at /usr/share/perl5/LWP/Protocol/http.pm line 50.

Check:

openssl s_client -connect 192.168.1.1:443

returns:

...
Verify return code: 21 (unable to verify the first certificate)
...

Solution

  • Servicess → SquidGuard Proxy Filter → Common ACL → ALL to allow
  • May need to refresh the browser cache:
    • CTRL F5
    • CTRL+SHIFT+r
    • SHIFT+reload button
  • Might need to turn off support for the newest and most secure connection protocol, TLS 1.3.
    • In Firefox
      • Type about:config in the address bar and press Enter/Return.
      • In the search box above the list, type TLS.
      • Double-click the security.tls.version.max preference to display a dialog where you can edit the value from 4 to 3 (or in other words, from TLS 1.3 to TLS 1.2).
      • Then click OK.

pfsense/troubleshooting/ssl_error_rx_record_too_long.1587552325.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki