topic Re: CSS SSL module sending TLSv1 type 21 errors in Application Networking

CSS SSL module sending TLSv1 type 21 errors

kristyorr — Thu, 19 Mar 2009 18:49:59 GMT

I have a CSS 11503, version 8.02, with an SSL module. The CSS takes the SSL data, decrypts it, passes it back to the servers, and encrypts it before handing it back to the clients.

Users were complaining of latency so I setup a sniffer. I am finding TLSv1 encrypted alerts that are type 21. I also see tons of retransmits. I have check the physically layer roughly a million times and am not seeing anything to indicate a layer one problem.

Any idea what is going on? Or...is there a way to dump the errors from the CSS before they get encrypted onto the wire?

Re: CSS SSL module sending TLSv1 type 21 errors

kristyorr — Thu, 21 Oct 2010 00:39:03 GMT

There was a bug in the IOS of the 2950 switch the CSS was connected to. Finally found it by noticing the high number on the input queues for the

attached switchports.

CSS SSL module sending TLSv1 type 21 errors

ewood — Wed, 08 Aug 2012 16:26:17 GMT

Hi Kristy, I know this was a while back for you, but I think I am seeing the same issue. Do you happen to remember what version of IOS you had to install to resolve the bug?