Forum Discussion
ali_64819
Nimbostratus
NimbostratusF5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors
Hello everyone, can anybody help me in resolving these errors.
i have recently upgraded F5 Big-Ip from 10.2 to 11.1 and recieving the following errors. 1. "Open ssl error -error:140790E5:SSL routines:SSL23 _WRITE:ssl handshake failure" (Navigating to System-->logs --> local traffic) 2. F5 big-IP is not sending all the logs to LOG Management system (Symantec SIM). Logs related to ASM are not present in the Symantec SIM, although i use to recieve the logs before the upgrade, F5 is only sending Partial logs to Symantec SIM, i can only view LTM Logs and some ASM LOGs which are of severity info,notice in Symantec SIM.
hoolioCirrostratus
Hi ali,
I'd open a case with F5 Support on this.
Aaron
TechgeeegHi Ali,
From the message one thing is clear due to the certificate miss match there is a handshake and trust problem with the pair device for any thing. Due to which the things are not working. Better that you open a case with F5 and do share with us your experience and resolution of this issue.
Regards,
Moe_JartinCirrus
Ali,
Did you get this resolved? I am seeing the same thing. Searches suggest it is probably just an issue with one of my HTTPS monitors. Any update?
Joe
luis_54438Same error- Andy_Cohen_4986Also seeing the same error since our v11.1 upgrade. This is clearly related to an issue/change in the SSL behaviour in v11.
Getting these errors repeatedly. Anyone have any ideas?
bigd[5293] 01060111 Open SSL error - error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol.
bigd[5293] 01060111 Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure. - santosh_81454Hi,
We faced similar SSL errors when migrated to V11.
If you are using Server SSL profile and applied to the VIP, try changing the parent profile type to "serverssl-insecure-compatible" for the server profile.
The errors were fixed after changing this for us.
- Santosh. 
emilio_104458hi all,
same error, same version with client ssl profile. i try (as suggested) to set as parent profile "clientssl-insecure-compatible" but the errors are still present:
Jul 6 19:03:17 f5 err bigd[13548]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.
Jul 6 19:03:42 f5 err bigd[13548]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.
any ideas?
nitassEmployee
bigd is daemon which doing health check. so, have you checked https monitor e.g. missing certificate or key, certificate or key might not match, certificate or key might not be in pem format?- emilio_104458Hi nitass,
i deleted all custom ssl profile and ssl certificate (only default ones now is present) and i still have:
Jul 9 16:17:31 f5 err bigd[17045]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.
any other ideas? - nitassi deleted all custom ssl profile and ssl certificate (only default ones now is present) and i still have:
Jul 9 16:17:31 f5 err bigd[17045]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.why is ssl profile?? i thought we were talking about https monitor, weren't we?