Hi
Am getting an error while accessing https site, any idea what it is about ?

Failed to establish a secure connection to ip

The system returned: (71) Protocol error

This proxy and the remote host failed to negotiate a mutually acceptable security settings for handling your request. It is possible that the remote host does not support secure connections, or the proxy is not satisfied with the host security credentials.

----
Below is the https line in my squid.conf
https_port 3130 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB key=/etc/squid3/cert/myssl.local.private cert=/etc/squid3/cert/myssl.local.cert

Well that's a pretty descriptive error message there. What do the actual logs say about it? Have you captured the handshake traffic between the proxy and the destination? Maybe they have no common ciphers. Maybe it's just non-ssl garbage coming back?

Hi
Thanks for reply. I am not sure of what you saying
I get this error from cache.log
2014/09/16 15:22:50.736 kid1| client_side.cc(256) readSomeData: local=164.100.197.150:443 remote=192.168.3.2:48587 FD 11 flags=33: reading request...
2014/09/16 15:22:50.896 kid1| client_side.cc(2383) connFinishedWithConn: local=164.100.197.150:443 remote=192.168.3.2:48587 FD 11 flags=33 closed
2014/09/16 15:22:50.896 kid1| client_side.cc(764) swanSong: local=164.100.197.150:443 remote=192.168.3.2:48587 flags=33
2014/09/16 15:22:50.896 kid1| client_side.cc(799) ~ConnStateData:
2014/09/16 15:22:51.004 kid1| client_side.cc(3446) httpsAccept: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33 accepted, starting SSL negotiation.
2014/09/16 15:22:51.008 kid1| client_side.cc(256) readSomeData: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33: reading request...
2014/09/16 15:22:51.009 kid1| client_side.cc(2383) connFinishedWithConn: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33 closed
2014/09/16 15:22:51.009 kid1| client_side.cc(764) swanSong: local=164.100.197.150:443 remote=192.168.3.2:48590 flags=33
2014/09/16 15:22:51.009 kid1| client_side.cc(799) ~ConnStateData:
/09/16 15:27:12.098 kid1| client_side.cc(799) ~ConnStateData:

---------- Post added 09-16-14 at 05:05 AM ----------

Hi
Thanks for reply. I am not sure of what you saying
I get this error from cache.log
2014/09/16 15:22:50.736 kid1| client_side.cc(256) readSomeData: local=164.100.197.150:443 remote=192.168.3.2:48587 FD 11 flags=33: reading request...
2014/09/16 15:22:50.896 kid1| client_side.cc(2383) connFinishedWithConn: local=164.100.197.150:443 remote=192.168.3.2:48587 FD 11 flags=33 closed
2014/09/16 15:22:50.896 kid1| client_side.cc(764) swanSong: local=164.100.197.150:443 remote=192.168.3.2:48587 flags=33
2014/09/16 15:22:50.896 kid1| client_side.cc(799) ~ConnStateData:
2014/09/16 15:22:51.004 kid1| client_side.cc(3446) httpsAccept: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33 accepted, starting SSL negotiation.
2014/09/16 15:22:51.008 kid1| client_side.cc(256) readSomeData: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33: reading request...
2014/09/16 15:22:51.009 kid1| client_side.cc(2383) connFinishedWithConn: local=164.100.197.150:443 remote=192.168.3.2:48590 FD 11 flags=33 closed
2014/09/16 15:22:51.009 kid1| client_side.cc(764) swanSong: local=164.100.197.150:443 remote=192.168.3.2:48590 flags=33
2014/09/16 15:22:51.009 kid1| client_side.cc(799) ~ConnStateData:
/09/16 15:27:12.098 kid1| client_side.cc(799) ~ConnStateData: