SSL handshake failed - Failed TLS protocol negotiation: SSLv3/TLS write client hello

[Kyle_Katarn 1]

Hello,

 

When using 8.62 + OpenSSL 1.1.1c, some users are reporting aborted communications due to "SSL handshake failed - Failed TLS protocol negotiation: SSLv3/TLS write client hello".

Seems to happen as single random events.

Should I suspect client or server problems ?

[Angus Robertson 577]

SSL connections fail all the time for dozens of different reasons.  The client might require protocols or ciphers the server does not support, or vice versa.  Much depends on how the SslContext is set-up, it's easier on modern components like TSslHttpRest that do most of the hard work for you. 

 

If it's an obscure server, bad SSL configuration is always a possibility and https://www.ssllabs.com/ssltest/  is always useful to find how good or bad the server really is. 

 

Angus

 

[Kyle_Katarn 1]

Anything suspicious in the results ?

 

https://www.ssllabs.com/ssltest/analyze.html?d=www.kcsoftwares.com

[Angus Robertson 577]

No, it gets an A rating and supports TLS/1,2 so should work with ICS.  The OverbyteIcsHttpRestTst sample connects fine from here:

 

www.kcsoftwares.com SSL Connected OK with TLSv1.2, cipher ECDHE-RSA-AES128-GCM-SHA256, key auth RSA, key exchange ECDH, encryption AESGCM(128), message auth AEAD

 

Angus
 

[Kyle_Katarn 1]

OK.... maybe just a transient glitch !

thanks for your help !