F5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors

just a doubt, if i remove https monitor from my pool, if i dump with filter host and port of specific pool member, i think i've no traffic on that dump...right?i would remove monitor from pool before starting tcpdump because i want to capture from the 1st monitor packet. i have come across an issue which i was unable to decrypt tcpdump if i do not capture from the 1st packet.

 

 

using the following send string into https monitor seems no error appears:

 

 

GET /\r\n\r\n

 

 

(just duplicate the \r\n)i am not sure but i think ssl handshake failure should happen before sending GET request. for double \r\n, it depends on what bigip version and http protocol you are using.

 

 

sol2167: Constructing HTTP requests for use with the HTTP or HTTPS application health monitor

 

http://support.f5.com/kb/en-us/solutions/public/2000/100/sol2167.html

 

 

so, the issue is gone, isn't it? really?