%HTTPS: SSL handshake fail

[mohammed hashim]

Hi,

for testing purpose, I want to trasnfer file from one router to another through HTTPS,

R10--------R12

R10#
username admin privilege 15 password 0 CISCO
ip http server
ip http authentication local
ip http secure-server
ip http secure-ciphersuite 3des-ede-cbc-sha
ip http secure-port 4443

R12#
ip http client source-interface GigabitEthernet1.102
ip http client username admin
ip http client password 0 CISCO
ip http client secure-ciphersuite 3des-ede-cbc-sha

R12#copy https://admin:CISCO@10.0.102.10:4443/bootflash/csr1000v-espbase.03.09.00a.S.153-2.S0a.SPA.pkg null:

but getting this error on R10:

R10#
000174: *Mar 13 08:04:53.602: %HTTPS: SSL handshake fail (-6992)
000175: *Mar 13 08:04:53.602: HTTP: ssl handshake failed (-40404)

but if I copy using http, it works fine:

R12#copy http://admin:CISCO@10.0.102.10/bootflash/csr1000v-espbase.03.09.00a.S$
Accessing http://*****:*****@10.0.102.10/bootflash/csr1000v-espbase.03.09.00a.S.153-2.S0a.SPA.pkg...
Loading http://***********@10.0.102.10/bootflash/csr1000v-espbase.03.09.00a.S.153-2.S0a.SPA.pkg !!!!!!!!!!

so what the SSL issue refer to ?

[Philip D'Ath]

It is probably using an untrusted certificate.

If you want a easy secure method use scp.

[MTWiley123456789]

I'm seeing the same error when trying to ZTP some Catalyst 9300s.
The certificate is freshly issued by lets encrypt and seems to be trusted by my browser as well as switches from other vendors.   This seems to be specific to only the Cisco switches in our environment.   Any suggestions?

[balaji.bandi]

the OP issue was different issue, can you post new request with more information about your Logs and configuration.

what IOS XE Code running.

This seems to be specific to only the Cisco switches in our environment.

You need to provide more information, this basically TLS handshake between client Server, if configured correctly. when you say some, how about other same model and same Code running ?