[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
2023-12-04 21:52:59
Model: Archer BE800  
Hardware Version: V1
Firmware Version: 1.0.9 Build 20230914 rel.69752(5553)

When my devices are on WiFi (both 5G and 6G bands) I see frequent packet corruption from SSL streams. 

 

Ex.

python: ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC] decryption failed or bad record mac (_ssl.c:2633)

 

curl: (56) LibreSSL SSL_read: LibreSSL/3.3.6: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt, errno 0

 

I have verified this across four different clients (3 macs, 1 windows) and have also verified when I connect over ethernet I am not able to reproduce the ssl errors seen while connected to wifi. With the thought this might be a bad unit I purchased a second BE800 but it has the exact same issue.

 

Are there any ongoing efforts to fix this issue and should we expect to see a firmware update soon to fix this or are these units going to recycling?

  0      
  0      
#1
Options
4 Reply
Re:[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
2023-12-05 03:30:07

  @eousphoros 

 

Hi, thank you very much for the feedback.

I've sent you a private message, please have a check and let us know if it helps.

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  1  
  1  
#2
Options
Re:[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
2023-12-05 06:32:27

  @Sunshine has brought a beautiful sunrise to my coast. This is the quickest one of my bug reports has ever been addressed. Well done.

 

I banged on the router for a couple hours trying to reproduce the issue but after applying the fix sent in dm I have been unable to do so. No SSL errors so far! 

 

Thank you for the rapid turn around. 

  0  
  0  
#3
Options
Re:[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
2023-12-08 02:01:50

47389dc7833c42928ec4430005659922 My router still has not passed any bad ssl packets to my clients. Hurray! Only feedback      I have is packet latency and throughput are slightly worse but it is much better then the  corruption I was seeing previously.

e0d38459273a4f61a1c72b1fba8c1572

 

 

I think that packet loss is due to packet delay (Also notice the high bufferbloat latency on uploads, didn't see values that high prior to the fix). When I do tests from the command line I can see these latency spikes there, this test must have strict deadlines.

 

 

@Sunshine Any chance we will see this fix go live soon? I have the second BE800 peered through easy mesh that I don't think I can manually update with the provided fix. Despite the slightly worse performance, I prefer the patched version.

  0  
  0  
#4
Options
Re:[BE800] Packet Corruption on WiFi - ssl.SSLError: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC]
2023-12-08 07:39:55

  @eousphoros 

 

Hi, thank you very much for the update, glad to hear that previous SSL packets issue has been corrected, and I will report your feedback to our engineer as well.

 

And yes, the fix will be added in future firmware but no expected date can be given now, you could monitor new firmware update on the router web GUI or Tether App.

 

In addition, for the EasyMesh satellite BE800, I am afarid you will need to reset it first, then login its web management to update it manually and then add it to the EasyMesh network again.

 

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  1  
  1  
#5
Options