Need to get in touch with a Sales Representative? Talk to a Business Expert HERE .
NancyKnows's profile
Employee

Employee

 • 

547 Messages

Monday, April 11th, 2011 5:22 PM

SSL negotiation failed (error 243)

by fischest » Tue Mar 15, 2011 1:54 pm

Hello, I am at a client site where I have to connect through a proxy. This proxy as observed seems to terminate SSL connections and I have to manually install a trusted authority certificate in my browser. For the Global Network Client I need a solution how to connect through this proxy. Is it possible to install a trusted authority anywhere?

Kind regards,
Steffen
*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

Contributor

 • 

2 Messages

11 years ago

I also have same problem, please suggest any solution.

 

Attaching the logs.

 

Thanks,

Abhishek

1 Attachment

Employee

 • 

587 Messages

11 years ago

I reviewed your logs and it shows you are connecting through a proxy

 

[09263913 13:48:18:047] Connection requested to 122.248.182.119:443.
[09263913 13:48:18:048] Proxy: 10.43.3.110
[09263913 13:48:18:049] Proxy Port: 8080
[09263913 13:48:18:050] Proxy Credentials: Basic Og==

 

[09263913 13:48:27:121] ClientHandshakeLoop(): recv(...) = 7
[09263913 13:48:27:122] ClientHandshakeLoop(): InitializeSecurityContextA() failed.
[09263913 13:48:27:123] PerformClientHandshake() failed.
[09263913 13:48:27:124] Error: g_pSSPI->QueryContextAttributes() = 80090301
[09263913 13:48:29:142] CloseTrace() called.

 

 

For some reason it is failing.   Can you ask the Proxy Manager at that location to check their logs to see why this is failing?

 

 

Contributor

 • 

3 Messages

9 years ago

Hi I have the same issue, I'm an IBM employee and yesterday I was working fine and today I couldn't connect to the VPN, could you please help with this issue?

 

2015/04/07 20:15:28 Connect using '' (2001 4 High-speed connection, ).
2015/04/07 20:15:29 The Internet is accessible.
2015/04/07 20:15:30 Check for existing Internet connection.
2015/04/07 20:15:31 Sending 'authentication request 204.146.172.230 80' to :.
2015/04/07 20:15:32 Request failed (error 460 !Error 460 Cannot authenticate at this time. (460) '').
2015/04/07 20:15:33 Sending 'authentication request 204.146.172.230 80' to :.
2015/04/07 20:15:34 Request completed successfully.
2015/04/07 20:15:35 Connecting to VPN tunnel server 129.42.208.234 6 (type ).
2015/04/07 20:15:36 VPN connect attempt failed (error 243 !Error 243 SSL protocol negotiation failed. '').
2015/04/07 20:15:37 Connecting to VPN tunnel server 204.146.24.46 6 (type ).
2015/04/07 20:15:39 VPN connect attempt failed (error 243 !Error 243 SSL protocol negotiation failed. '').
2015/04/07 20:15:40 Connecting to VPN tunnel server 129.42.208.230 6 (type ).
2015/04/07 20:16:04 VPN connect attempt failed (error 243 !Error 243 SSL protocol negotiation failed. '').
2015/04/07 20:16:05 Connect attempt failed (error 243 !Error 243 SSL protocol negotiation failed. '').

Employee

 • 

587 Messages

9 years ago

Please attach the full support log.   Open the AT&T Global Network Client, click on Help and Create support log.

 

Please attach it to this post.

 

Thank you.

Contributor

 • 

3 Messages

9 years ago

Hi, here is the complete log, I hope you can help us!

Also it was done this:

1. Open the AT&T Global Network Client, select Settings and then Login Properties.   Then select Preferences and check    Override Defaults.  Scroll down to VPN Details and check
   Use ephemeral Source Ports for IPSEC and test the connection again.

 

1 Attachment

Employee

 • 

587 Messages

9 years ago

 

Can you please tell us where/how you are connecting?   Home , office, etc?   Are you connecting through a router or firewall?

 

From the logs, it looks like something local is blocking the connection.  Were there any changes that you are aware of?

 

 

 

Contributor

 • 

3 Messages

9 years ago

Hi, I'm trying to connect from the customer office, I'm outside of the IBM office, and I really don't know if there are some changes.

Thanks for your quick replay!

Employee

 • 

587 Messages

9 years ago

The error seems to occur when you are connecting from this network:

The local address is 11.15.206.230

 

I would suggest asking their IT to verify all ports/protocols are open for the AT&T Global Network Client.

 

Please see Appendix C:  Third-Party Firewall Support on page 139

http://www.corp.att.com/agnc/windows/documentation/adminguide.pdf

 

 

Employee

 • 

587 Messages

9 years ago

Hi Marco,

 

Please ignore my last update for now.  I think I found another issue.   I will update you shortly.

 

Thank you.

 

Employee

 • 

587 Messages

9 years ago

Hi Marco,

 

The issue should be resolved.    Can you please test the connection again and let me know if you still see any errors.

 

Thank you.

Not finding what you're looking for?