F5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors

Agreed. The fix for us was to remove the SSL health check one-by-one from each of the pools. We finally found one pool that was causing the issue. To be clear though, this is not a problem with the pool but rather a change in behavior on the F5 side from 10.x to 11.x. I still think F5 needs to fixed the issue or give the option to ignore untrusted certs for health checks (or whatever is the root cause of the error).

 

 

Joe M