Hello everyone, can anybody help me in resolving these errors. i have recently upgraded F5 Big-Ip from 10.2 to 11.1 and recieving the following errors. 1. "Open ssl error -error:140790E5:SSL routines:SSL23 _WRITE:ssl handshake failure" (Navigating to System-->logs --> local traffic) 2. F5 big-IP is not sending all the logs to LOG Management system (Symantec SIM). Logs related to ASM are not present in the Symantec SIM, although i use to recieve the logs before the upgrade, F5 is only sending Partial logs to Symantec SIM, i can only view LTM Logs and some ASM LOGs which are of severity info,notice in Symantec SIM.

Hi ali, I'd open a case with F5 Support on this. Aaron

Hi Ali, From the message one thing is clear due to the certificate miss match there is a handshake and trust problem with the pair device for any thing. Due to which the things are not working. Better that you open a case with F5 and do share with us your experience and resolution of this issue. Regards,

Ali, Did you get this resolved? I am seeing the same thing. Searches suggest it is probably just an issue with one of my HTTPS monitors. Any update? Joe

Also seeing the same error since our v11.1 upgrade. This is clearly related to an issue/change in the SSL behaviour in v11. Getting these errors repeatedly. Anyone have any ideas? bigd[5293] 01060111 Open SSL error - error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol. bigd[5293] 01060111 Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.

F5 Big-Ip upgraded to 11.1, "Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure" and many other errors

26 Replies

hooleylist
Cirrostratus
Feb 29, 2012
Hi ali,

I'd open a case with F5 Support on this.

Aaron
Techgeeeg
Nimbostratus
Mar 02, 2012
Hi Ali,

From the message one thing is clear due to the certificate miss match there is a handshake and trust problem with the pair device for any thing. Due to which the things are not working. Better that you open a case with F5 and do share with us your experience and resolution of this issue.

Regards,
Moe_Jartin
Cirrus
Apr 21, 2012
Ali,

Did you get this resolved? I am seeing the same thing. Searches suggest it is probably just an issue with one of my HTTPS monitors. Any update?

Joe
luis_54438
Nimbostratus
May 15, 2012
Same error
Andy_Cohen_4986
Nimbostratus
May 22, 2012
Also seeing the same error since our v11.1 upgrade. This is clearly related to an issue/change in the SSL behaviour in v11.

Getting these errors repeatedly. Anyone have any ideas?

bigd[5293] 01060111 Open SSL error - error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol.

bigd[5293] 01060111 Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.
santosh_81454
Nimbostratus
May 22, 2012
Hi,

We faced similar SSL errors when migrated to V11.

If you are using Server SSL profile and applied to the VIP, try changing the parent profile type to "serverssl-insecure-compatible" for the server profile.

The errors were fixed after changing this for us.

- Santosh.
emilio_104458
Nimbostratus
Jul 06, 2012
hi all,

same error, same version with client ssl profile. i try (as suggested) to set as parent profile "clientssl-insecure-compatible" but the errors are still present:

Jul 6 19:03:17 f5 err bigd[13548]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.

Jul 6 19:03:42 f5 err bigd[13548]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.

any ideas?
nitass
Employee
Jul 06, 2012
bigd is daemon which doing health check. so, have you checked https monitor e.g. missing certificate or key, certificate or key might not match, certificate or key might not be in pem format?
emilio_104458
Nimbostratus
Jul 09, 2012
Hi nitass,

i deleted all custom ssl profile and ssl certificate (only default ones now is present) and i still have:

Jul 9 16:17:31 f5 err bigd[17045]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.

any other ideas?
nitass
Employee
Jul 09, 2012
i deleted all custom ssl profile and ssl certificate (only default ones now is present) and i still have:

Jul 9 16:17:31 f5 err bigd[17045]: 01060111:3: Open SSL error - error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure.why is ssl profile?? i thought we were talking about https monitor, weren't we?