SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number or similar

After experiencing a pfsense log overflow with SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, SSL: 1 error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol and similar errors for a while I finally figured a way to reduce them to the more reasonable level by simply checking Disable webConfigurator redirect rule in the advanced settings.
There are still some errors in the log though, however, way less than before.

sslerrors

Remarks – Captive Portal is disabled, webConfigurator is accessible from Internet, pfsense version is 2.2.5-RELEASE (amd64) – there is a setting to completely disable lighthttpd logging (as it was before version 2) under settings of the system log

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.