Forum Discussion

Nuruddin_Ahmed_'s avatar
Nuruddin_Ahmed_
Icon for Cirrostratus rankCirrostratus
Sep 28, 2016

SSL getting reset - ssl_select_suite:5886

On one of the virtual server for only one client, we are seeing in SSL debug (with TCP RST Cause tmsh settings), i can see that it is failing with -

 

Sep 27 16:27:07 F5-Test debug tmm3[22672]: 01260009:7: Connection error: ssl_select_suite:5886: no shared ciphers (40) Sep 27 16:27:07 F5-Test info tmm3[22672]: 01260013:6: SSL Handshake failed for TCP 1.1.1.1:1917 -> 10.10.10.10:443 Sep 27 16:27:13 F5-Test debug tmm2[22672]: 01260009:7: Connection error: ssl_select_suite:5886: no shared ciphers (40) Sep 27 16:27:13 F5-Test info tmm2[22672]: 01260013:6: SSL Handshake failed for TCP 1.1.1.1:1922 -> 10.10.10.10:443

 

Any thoughts, what could be the reason?

 

application delivery
BIG-IP
LTM

2 Replies

Sort By
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Sep 28, 2016

    As per log its looks like your client machine the SSL version or the Cipher list supported by the F5 and its peer (the client) doesn't match.

     

    Please do tcpdump on the client or on the F5 system to check the ssl handshake. You may see that there is no matching ciphers between the browser and the VS.

     

    • Nuruddin_Ahmed_'s avatar
      Nuruddin_Ahmed_
      Icon for Cirrostratus rankCirrostratus
      Sep 29, 2016

      yes verified, client had windows 2003 machine which was connecting to tlsv1 but using old unsecure ciphers. Worked after they applied a windows upgrade for ciphers. Thanks