Something in 2.61 breaks Office 365

[allenlook]

Installed 26.1 and all seemed fine.  Yesterday I was having a lot of trouble with M365, specifically PowerPoint and Excel files that would save locally but generated a lot of "Upload Failed" messages, and intermittent "SSL library load failed" messages in Excel.

I reverted to 25.x and everything was working OK again.  I tried disabling Maltrail and its blocklists, turning off the Unbound DNS blocklist, and looking for rules that might be causing trouble.

Using the M365 Connectivity Test website everything was working OK under 25.x, but it would generate a lot of errors to domains like microsoft.com, and .microsoft using 26.1.

Are there any other reports of this, or does anything stick out as being a possible culprit?

[nicholaswkc]

SSL Certificate may cause this errors.

[allenlook]

Thank you for the reply. 

Any Google-fu points to TLS 1.2 enablement on the PCs, but these are multiple workstations with TLS 1.2 enabled, and that have been working just fine all along until 26.1. 

What SSL certificate setting(s) would change on the firewall between 25.7 and 26.1?

[nero355]

Any Google-fu points to TLS 1.2 enablement on the PCs, but these are multiple workstations with TLS 1.2 enabled, and that have been working just fine all along until 26.1. 

What SSL certificate setting(s) would change on the firewall between 25.7 and 26.1?

Does this apply to your network : https://forum.opnsense.org/index.php?topic=50735.0 ??



Could you give me a link to this :

M365 Connectivity Test website

Just in case I might need it for whatever reason...

[Boxer]

I don't know if related or not but... https://forum.opnsense.org/index.php?topic=50551.0

[allenlook]

Thank you for the replies, I am researching them now.

Link to M365 Connectivity Test - with 26.1 it often immediately fails on trying to find my location...

https://connectivity.office.com/

[allenlook]

Does this apply to your network : https://forum.opnsense.org/index.php?topic=50735.0 ??

I'm not using freeRadius, but I am using DNS over TLS, would that be impacted?