cancel
Showing results for 
Search instead for 
Did you mean: 

Intermittent connection issues loading/changing site- secure connection failed/site can't be reached

EDIflyer
Involved

Is anyone else occasionally getting a 'connection down' error from Chrome (or 'Secure Connection Failed' from Firefox) when changing page - if I hit refresh it works fine. At first I wondered if it was the site I was using but have noticed it on multiple different major websites over the past couple of months and not noticed it from other locations where I don't use Three Broadband so does seem to be related to the router/connection (this is via wired Ethernet too, so not a WiFi problem).  I've tried changing DNS server in case that helps but no difference.

It mainly seems to happen when trying to first load a site or (annoyingly) at checkout when a different site is being loaded as part of the checkout process.  It certainly doesn't happen everytime but does happen with reasonable frequency.  I've also noticed I often get it when trying to pull/push from/to Github too and have to do so a number of times for it to work (browsing the Github website works fine).

 
I'm using a NR5103E with Firmware Version V1.00(ACBJ.0)b14 - I tried rebooting it but to no effect.

EDIflyer_0-1697984212494.pngEDIflyer_1-1697984219294.png

 
 

EDIflyer_4-1697984241361.png

 

550 REPLIES 550
BrummyGit
Active

I had something remarkably similar in my work life. It was due to a firewall in the middle that was inspecting traffic within the TLS stream and therefore acting as a TLS proxy. We had an issue with missing servers in the certificate's subject alternate name. The inbound connection established from internet to the firewall, but the onward tunnel never established correctly therefore the inbound was closed due to a timeout (the destination server just ignored invalid connection attempts).

Sounds like Three might have a certificate missing individual names or ip addresses of one or more of their proxy array servers.

EDIflyer
Involved

Excellent detective work! 👍

bytespider
Involved

This is amazingly insightful, thanks for posting

wgen
Regular

If anyone wants to check this issue, they can run this script I've done to check if a website is affected.

Bash and curl are required.

Run it as follows:
$ ./script.sh https://www.topcashback.co.uk

#!/bin/bash

check_ssl_error() {
    response=$(curl -s -o /dev/null -w "%{errormsg}" "$1")

    if [ -z "$response" ]; then
        echo "Success";
    else
        echo "Error - $response";
    fi
}

echo "---"
echo "Testing: $1";
echo "---"

fail=0

for i in $(seq -f "%02g" 01 20); do
    result=$(check_ssl_error "$1")

    if [ "$result" != "Success" ]; then
        ((fail++))
    fi

    echo "Attempt $i: $result"

    sleep 0.5
done

echo "---"
echo "SSL Errors: $fail/20";
echo "---"

 Screenshot 2024-05-14 at 16.00.11.png

Midnight54
Established

I've just enabled dev mode and enabled linux for windows, installed ubuntu but I seem to be getting the following error when running "./script.sh https://www.topcashback.co.uk".... any ideas?

er1.jpger2.jpg

I'm not familiar with linux much however

./script.sh https://www.topcashback.co.uk
./script.sh: line 2: $'\r': command not found
./script.sh: line 3: syntax error near unexpected token `$'{\r''
'/script.sh: line 3: `check_ssl_error() {

Midnight54
Established

to answer myself - figured out, have to convert with dos2unix to get rid of carriage returns (how archaic for things to be so fussy 🙂

However - as of right now - I'm trying it and its not giving me errors - router has been not been rebooted and uptime of 43hours - so wonder if either coincidence, or the issue lesser later at night, or if something has changed over the past hour or so while I've been messing about - as at mo touch wood the websites i'm trying are working

 

EDIflyer
Involved

Really useful script, thanks @wgen - the weird thing is trying it today I'm not getting the usual errors - it's as if something has changed. Is anyone else noticing this?

JonathanB
Community Moderator
Community Moderator

Thanks @wgen I've highlighted this feedback to our tech teams.



Mod tip! The author of a post can hit 'Accept as Solution', to highlight a reply that helped solved their query.


AkiTaiyo
Active

These are all the direct URLs mentioned as failing on this thread so far.. This doesn't include the non-url metions such as banking apps, xbox sign in, smart TV apps etc..

www.jdoqocy.com
www.topcashback.co.uk
retail.santander.co.uk
github.com
raw.githubusercontent.com
ghcr.io
portal-ww.ecouser.net
www.skyscanner.net
malkoffdevices.com
www.netomnia.com
diy.com
royalmail.com
duckduckgo.com
inews.co.uk
news.sky.com
visualstudio.microsoft.com
new.three.co.uk

 

bytespider
Involved

Since I have access to a large number of media and news outlet URLs I thought I would run the top 100 with @wgen's script.

news.yahoo.com 6/20
style.yahoo.com 4/20
road.cc 11/20
respectyou.me 12/20
thesethreerooms.com 1/20
www.liverpoolecho.co.uk  1/20
metro.co.uk 1/20
www.gazettelive.co.uk  1/20

Granted these could just be adding noise to the issue.