I am trying to find a solution for this error (full error message is [crit] 556#0: *1940 SSL_do_handshake() failed (SSL: error:140A1175:SSL routines:SSL_BYTES_TO_CIPHER_LIST:inappropriate fallback) while SSL handshaking, client: xx.xx.xx.xx, server: 0.0.0.0:443)
I have read multiple similar questions (like this one or this one, but they all treat the problem with browsers, and my clients are mobile apps.
Also, they all talk about having/not having TLS_FALLBACK_SCSV enabled in openssl. After finding this tutorial about strong SSL security on nginx, I am even more baffled. In the tutorial it says that
OpenSSL 1.0.1 has TLSFALLBACKSCSV in 1.0.1j and higher.
On my system (Ubuntu trusty) I get
# openssl version
OpenSSL 1.0.1f 6 Jan 2014
I have tried upgrading to a newer version, but this seems to be the latest version for Ubuntu trusty. It is worth mentioning that this errors started occurring quite recently, and without apparent reason. The errors don't show up always (the behaviour is quite random actually).
However, this is worrying, since their frequency is getting higher and higher and important data is being lost because of these unsuccessful requests.
Any help would be greatly appreciated. Thanks.