question

BKITStaff-2336 avatar image
0 Votes"
BKITStaff-2336 asked DIONJeanMichel-5189 answered

testconnectivity.microsoft.com does not work anymore - SSL negotiation error

We have been experiencing a problem with the tool for a few weeks now. We've been using it for years without any issues.

Basically, either that I use it for ActiveSync or Outlook Anywhere connectivity tests, I get the same error message:

131925-immagine.png

"The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation."

My users seem to not have any problems when using Exchange services (OWA, ActiveSync, Outlook anywhere).

Since I've been struggling on this issue for a few days now, can you give me some advice on where to look to guess what the problem is? What I can tell is:

-Did not make any firewall/networking changes that I'm aware of.
-Did not install any updates on Exchange, nor I made any changes to the configuration.
-My cert is valid and current.

Perhaps, could it be due to some change to the tool itself (cipher suites, tls protocols etc)?

Thank you,
Francesco


office-exchange-server-administrationoffice-exchange-server-connectivity
immagine.png (9.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ZhengqiLou-MSFT avatar image
1 Vote"
ZhengqiLou-MSFT answered

Hi @BKITStaff-2336 ,

Please also check the Outlook Connectivity with Autodiscover.
BTW, what's the version of your server?

I could successfully test it with Autodiscover, but the ActiveSync failed with some SSL errors.
I think some parts of the programming of EXRCA could be wrong, if your system is running correctly, just ignore the test result.

Best regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JonathanHolloway-0940 avatar image
2 Votes"
JonathanHolloway-0940 answered BKITStaff-2336 commented

I am experiencing the same result, without changes. I too am suspecting SSL/TLS/Cipher changes are at play.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for the added feedback.

0 Votes 0 ·
ArnovanDoornVelzArtHetantwoordopIC-2991 avatar image
0 Votes"
ArnovanDoornVelzArtHetantwoordopIC-2991 answered BKITStaff-2336 commented

Same problem here with Exchange 2013.

I'm also experiences that setting up new Outlook profiles won't work outside the building. So I think there's definitely a problem with autodiscover. Couldn't found out what it is yet.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I think that yours is another problem. I don't have any issues on the client side.

0 Votes 0 ·

Same message with the MS Outlook Connectivity analyzer.

Have you tried to setup a new Outlook profile?

0 Votes 0 ·
BKITStaff-2336 avatar image BKITStaff-2336 ArnovanDoornVelzArtHetantwoordopIC-2991 ·

Yes, I did. It works. Connected through a mobile connection.

0 Votes 0 ·
BKITStaff-2336 avatar image
1 Vote"
BKITStaff-2336 answered

Hi @ZhengqiLou-MSFT , I ran the autodiscover test with Outlook 2016 (the test that you can run by doing ctrl+right click on outlook icon in the systray) from a laptop connected through my mobile hotspot to simulate an external connection request. No issues at all.

My Exchange version is 2013 CU23.

So, I will ignore the exRCA errors in the future, though I hope the exRCA developers will fix the issue asap, since that tool is really useful when you need somthing on the go for testing Exchange issues.

Thank you.
Francesco

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndreaCesaroni-5808 avatar image
0 Votes"
AndreaCesaroni-5808 answered ZhengqiLou-MSFT commented

I have the same problem.
i always receive the error
"The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation"
all work without problem but i can't test an account with connectivity test analizer.
some news ?

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Same here with Exchange 2019 CU10

0 Votes 0 ·

Hi,

Same here too with Exchange 2016 CU21 + Jul21SU

BR

0 Votes 0 ·
ZhengqiLou-MSFT avatar image ZhengqiLou-MSFT DIONJeanMichel-5189 ·

Hi @AndreaCesaroni-5808 and all friends ,

I got the same error, with the SSL Server Test, but when using another SSL checker, it's OK and ofc the server is running correctly.

A question is in what test you received the error?

I may think it is a problem of the EXRCA itself, before someone could fix this, we could:
As BKITStaff said, CTRL + Right click the Outlook button, and Test Email autoconfigurations > use autodiscover to test ( if you failed on EXRCA )
132646-image.png

Use other SSL checkers to test the certificate.

Or just ignore the ssl issue part and find the other useful information from the test results.

Best regards,
Lou

1 Vote 1 ·
image.png (3.6 KiB)
DIONJeanMichel-5189 avatar image
1 Vote"
DIONJeanMichel-5189 answered

Hi,

The test failed only on EXRCA.
Outlook test Email autoconfigurations work.

I use EXRCA for testing an hybrid setup.

I think too it's an issue with EXRCA.

BR

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.