Failed to Connect from Ubuntu using snx after configuration change

informatom — Wed, 07 Sep 2022 12:30:50 GMT

I had a working connection from Ubuntu Linux 20.04 using snx build 800008304.

After connection changes from the network team, that did not break Windows clients, I can no longer log in.

I am told, that protocols and ciphers have been disabled (e.g. . TLS1.0, TLS1.1).

Any ideas, what I could change on the client side, mitigating that.

The relevant part in the client side log is:

[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] talkssl::client_handler: Returning OK!!!
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] ckpSSL_NegotiateStep: current state = before/connect initialization
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] ckpSSL_NegotiateStep: should retry.
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] ckpSSL_NegotiateStep: current state = SSLv2/v3 read server hello A
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] SSL e stack
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] 7794:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:757

[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] ckpSSL_NegotiateStep: Current step failed. Error is: 336032784
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] ckpSSL_fwasync_connected: no connections err -3
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] fwasync_end_conn: scheduling the end of connection 7
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] fwasync_do_end_conn: closing connection 7 (conn=8acc960)
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] talkssl::end_handler: ending connection
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] snx_browser::Failure: entering with code: 1
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] got link down!- exit
[ 7794 -141844416]@leopoldstadt[7 Sep 14:28:20] snx: quit.

Any tips or ideas are highly appreciated.

Re: Failed to Connect from Ubuntu using snx after configuration change

PhoneBoy — Sat, 10 Sep 2022 02:26:14 GMT

What version/JHF is on the gateway?
Has a TAC case been opened for this?

Re: Failed to Connect from Ubuntu using snx after configuration change

informatom — Wed, 14 Sep 2022 11:01:10 GMT

Thank you for the quick answer, meanwhile the network team reversed their changes and I can log in as before. So, I actually don't know.

topic Re: Failed to Connect from Ubuntu using snx after configuration change in SASE and Remote Access

Failed to Connect from Ubuntu using snx after configuration change

Re: Failed to Connect from Ubuntu using snx after configuration change

Re: Failed to Connect from Ubuntu using snx after configuration change