F5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors

Posted By nitass on 07/10/2012 08:22 AM

 

with -IK opation, works i am run out of ideas. can you try to capture packet? is there anything suspicious?

 

 

steps could be like this.

 

1/ remove https monitor from pool member

 

2/ start tcpdump

 

e.g.

 

tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x and host 192.168.32.129 and port 443

 

x.x.x.x is non-floating selfip

 

 

3/ assign https monitor to pool member

 

4/ stop tcpdump (^c)

 

hi nitass,

 

just a doubt, if i remove https monitor from my pool, if i dump with filter host and port of specific pool member, i think i've no traffic on that dump...right?

 

 

i think i resolved it....i don't know if is solution for "all"...

 

 

using the following send string into https monitor seems no error appears:

 

 

GET /\r\n\r\n

 

 

(just duplicate the \r\n)

 

 

 

does it convince you?