Forum Discussion

2 Replies

  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus

    It looks like something wrong about clients key or client encryption settings. TCPDUMP might help!

     

    Also check this article

     

    ChangeCipherSpec (client)

     

    During the client's ChangeCipherSpec phase, the client initializes the options that were negotiated by both parties. This phase marks the point when the parties change the secure channel parameters from using asymmetric (public key) to symmetric (shared key) encryption. A handshake failure during this phase may relate to SSL message corruption or issues with the SSL implementation itself. [Content copied from article]

     

  • From what I could see, Version 3.1 means, its on Tls 1.1. So your client intiated handshake on tls1.1 and server (F5) also negotiates with the same. But its then failing in the changecipherspec. Definitely it hasn't gone to server-side connection yet. Its still on the client-side connection and failing. I would check on the clientssl profile ciphers and try troubleshooting.