I do have a Windows 10 Machine that is not connecting to some sites.
I do get error like:
Secure Connection Failed
Can’t connect securely to this page
The errors are intermittent, sometimes with a reboot it will start working, but after a while it stops working again (not always on the same site).
At first I thought it could be the internet connection, the server, my network...
So I tested in different computers and even a virtual machine with this windows host and it does work. So I started to suspect of Windows itself.
It stopped working on a specific website (my website), so I got a lot more info to debug.
Checking my frontend log (nginx) I got:
[crit] 2679#2679: *444 SSL_do_handshake() failed (SSL: error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol) while SSL handshaking,
Ok, in my server I only support
TLS 1.2. And the connection is using probably a lower, why? The browsers are updated (I always tested in more then one).
So I went back to my Windows box and used Wireshark to check the packets.
I could see, that my windows are always trying to make a
TLS 1.0 connection to some websites and it's send a cipher list not supported by the server.
Ok, that's why the handshake failed.
But why is it trying to use
I went to Firefox,
about:config and changed the
security.tls.version.min to 3 (TLS 1.2).
I tried everything I could in Firefox and chrome. But nothing changed.
I also tried changing windows registry, to totally disable
TLS 1.0 and
But no matters what I do, I always see a
TLS 1.0 connection in wireshark in the websites I do fail.
And yes, my website it's configured properly. There are major sites that I got the same error, like
Checking in the web, I found several bug in Windows about
TLS 1.2, some major bugs that stopped the rollout of some versions. But Microsoft claim it was fixed in
Does any one have any clue or suggestion what I could do? It's very annoying. Because some day it work and some day it does not work.
I'm pretty sure it's a Windows bug. But i'm stuck.