Forum Discussion
refra_151287
Cirrus
Aug 24, 2015SSL error "record_overflow"
Hi,
I'm trying ti troubleshoot SSL RST from the F5 VS, and the RST cause is
RST cause: [1915701:1666] {peer} SSL error (record_overflow(22)-C
actually I don't know what this issue implies to?
I...
Kevin_Stewart
Employee
Aug 24, 2015Which side is sending the reset? A record overflow is usually when one side sends more data than the peer can handle, for example when a server sends its certificate and a very long list of subordinate CAs in its ServerHello message.
If you do an openssl s_client from the BIG-IP shell you should be able to see what's happening:
openssl s_client -connect [server ip:port]
I'd also run an ssldump to watch data plane traffic between the BIG-IP and server:
ssldump -AdNn -i 0.0 port 443 and host [ip of server]
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects