Menu
Reply
  • 3
  • 0
  • 0
ssophia
Joining in
752 Views
Message 1 of 13
Flag for a moderator

SSL Certificate Verification Error

Hi,

I am trying to access the US Government's CBP site to apply for an ESTA (required for visits to US). I keep getting the following error message which prevents me from visiting the site - any advice on how this can be fixed?

SSL Certificate Verification Error (ssl_failed)

A secure SSL session could not be established with the Web Site: "".
This is typically caused by a Web Site that is not configured to accept SSL connections, but could be because the Proxy does not trust the Web Site's certificate authority.

RP2b For assistance, contact your network support team.
0 Kudos
Reply

Helpful Answers
  • 13.5K
  • 711
  • 4.65K
Superuser
Superuser
1,303 Views
Message 5 of 13
Flag for a moderator
Helpful Answer

Re: SSL Certificate Verification Error

Using Chrome on PC

There is an issue with the CBP page but it's NOT Certificate related

I get one warning - Mixed Content: The page at 'https://www.cbp.gov/' was loaded over HTTPS, but requested an insecure image 'http://www.dhs.gov/sites/default/files/images/icn-us-flag-21px.png'. This content should also be served over HTTPS.

Which is enough to cause the Secure notification NOT to be displayed.

The actual ESTA Application page does show as Secure though

Checking with OpenSSL

C:\Users\timdu>openssl s_client -connect www.cbp.gov:443 -quiet -CAfile C:\cacert.pem
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify return:1
depth=1 C = US, O = GeoTrust Inc., CN = GeoTrust SSL CA - G3
verify return:1
depth=0 C = US, ST = District Of Columbia, L = Washington, O = Department of Homeland Security, CN = www.dhs.gov
verify return:1

Shows no issues with the certificate.

Tim

________________________________________


Only use Helpful answer if your problems been solved.


All Replies
  • 17.33K
  • 1.58K
  • 2.97K
Superuser
Superuser
746 Views
Message 2 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

What browser are you using and which operating system?
**********************************
I work for Virgin Media - but all opinions posted here are my own
0 Kudos
Reply
  • 3
  • 0
  • 0
ssophia
Joining in
740 Views
Message 3 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

Chrome - Mac Yosemite.

Have also tried on Safari and via iPhone - all have the same message...

0 Kudos
Reply
  • 329
  • 23
  • 83
KeithW
Fibre optic
701 Views
Message 4 of 13
Flag for a moderator

Re: SSL Certificate Verification Error


ssophia wrote:

Chrome - Mac Yosemite.

Have also tried on Safari and via iPhone - all have the same message...


I am having no problems here using Chrome

Link to US Customs and Border Protection: https://www.cbp.gov/

Direct link to the ESTA application page: https://esta.cbp.dhs.gov/esta/esta.html

 

******************************************************************************************************************************
All the voices in my head are my own voices - Find your own!

If I have helped you then please click on the "thumbs up" icon.

If you feel I have helped to solve your problem then please mark my message as a "Helpful Answer"

0 Kudos
Reply
  • 13.5K
  • 711
  • 4.65K
Superuser
Superuser
1,304 Views
Message 5 of 13
Flag for a moderator
Helpful Answer

Re: SSL Certificate Verification Error

Using Chrome on PC

There is an issue with the CBP page but it's NOT Certificate related

I get one warning - Mixed Content: The page at 'https://www.cbp.gov/' was loaded over HTTPS, but requested an insecure image 'http://www.dhs.gov/sites/default/files/images/icn-us-flag-21px.png'. This content should also be served over HTTPS.

Which is enough to cause the Secure notification NOT to be displayed.

The actual ESTA Application page does show as Secure though

Checking with OpenSSL

C:\Users\timdu>openssl s_client -connect www.cbp.gov:443 -quiet -CAfile C:\cacert.pem
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify return:1
depth=1 C = US, O = GeoTrust Inc., CN = GeoTrust SSL CA - G3
verify return:1
depth=0 C = US, ST = District Of Columbia, L = Washington, O = Department of Homeland Security, CN = www.dhs.gov
verify return:1

Shows no issues with the certificate.

Tim

________________________________________


Only use Helpful answer if your problems been solved.

  • 1.69K
  • 63
  • 268
shanematthews
Knows their stuff
669 Views
Message 6 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

Seems to be working fine here in firefox, although their images are really pixelated, did they not test on resolutions higher than 800x600?

0 Kudos
Reply
  • 3
  • 0
  • 0
ssophia
Joining in
618 Views
Message 7 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

Thanks Tim. Ended up closing everything down, cleaning and logging back on which solved the problem
0 Kudos
Reply
  • 860
  • 46
  • 153
Tudor
Well-informed
611 Views
Message 8 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

It's an answer I hate to give but, 'clear everything out; shut it down; give it a kick; bring everything back up' often works.


There are 10 types of people: those who understand binary and those who don't
0 Kudos
Reply
  • 150
  • 8
  • 30
moof
Superfast
488 Views
Message 9 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

glad you got your issue fixed! Smiley Happy

I've also experienced an odd SSL related issue in the same time frame.

Numerous (but not all) sites that use https:// and where working fine only last week, have now ceased to function from ANY device on my LAN and now present:

site-1.jpg

However IF I change my IP address/route and go out over a VPN, they work fine (from the exact same devices)

Has there been some sort of security/filtering/crackdown @ Virgin HQ in the last week? (14th Aug onwards 2017)

effected: Macs/iPads/droids running different OS and Chrome/Safari .

Its the external IP number/route that seems to be the trigger in my case Smiley Frustrated

 

   

0 Kudos
Reply
  • 1.4K
  • 149
  • 444
用心棒
Knows their stuff
472 Views
Message 10 of 13
Flag for a moderator

Re: SSL Certificate Verification Error

Posted images take awhile to appear to other community members; some sort of clearing process.

Is it possible Web Safe is blocking those website?

FYI, Web Safe is a DNS filter which interrupts the connection to a website and when over HTTPS the web browser displays an error message, for example, in Mozilla's Firefox:

Secure Connection Failed

The connection to <redacted website URL> was interrupted while the page was loading.

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the web site owners to inform them of this problem.

Learn more…

Report errors like this to help Mozilla identify and block malicious sites

 And in Chromium / Chrome:

This site can’t provide a secure connection

<redacted website URL> sent an invalid response.
ERR_SSL_PROTOCOL_ERROR

 

0 Kudos
Reply