SSL Handshake errors

Forums Technical Forums
1

We are facing intermittent issues in our Exchange connectivity thats loadbalanced in F5 boxes (LTM version is 11.3.0 HF6 ). On observing the LTM logs, I noticed many instances of SSL handshake failures. Will these errors have any impact of the connectivity? Any idea how to resolve these errors.

01060111:3: Open SSL error - error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol. 01060111:3: Open SSL error - error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure. 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure. 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.

01260013:6: SSL Handshake failed for TCP from x.x.x.x:62373 to y.y.y.y:443 01260013:6: SSL Handshake failed for TCP from x.x.x.x:45849 to y.y.y.y:443

2

I don’t believe so. However, it’s clear you are using an SSL cipher string and negotiating a ‘compat’ cipher. For full SSL hardware acceleration you need to be using a native cipher. Making the move will no doubt also stop these errors being logged.

Making the transition shouldn’t be too hard. See here for some more information: 404 Page not found | BIG-IP Documentation and also here: 404 Page not found | BIG-IP Documentation.

3

It’s not necessary to be cipher issues, need a tcpdump captures on client and LTM to look into it.