F5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors

Posted By nitass on 07/09/2012 08:28 AM

 

can you list all the https monitors you have?

 

 

b monitor (https monitor name) list

 

root@f5(Active)(/Common)(tmos) list ltm monitor https

 

ltm monitor https https {

 

cipherlist DEFAULT:+SHA:+3DES:+kEDH

 

compatibility enabled

 

destination *:*

 

interval 5

 

send "GET /\\r\\n"

 

time-until-up 0

 

timeout 16

 

}

 

ltm monitor https https_443 {

 

cipherlist DEFAULT:+SHA:+3DES:+kEDH

 

compatibility enabled

 

defaults-from https

 

destination *:https

 

interval 5

 

send "GET /\\r\\n"

 

time-until-up 0

 

timeout 16

 

}

 

ltm monitor https https_head_f5 {

 

cipherlist DEFAULT:+SHA:+3DES:+kEDH

 

compatibility enabled

 

defaults-from https

 

destination *:*

 

interval 5

 

recv Server\\:

 

send "HEAD / HTTP/1.0\\r\\n\\r\\n"

 

time-until-up 0

 

timeout 16

 

}