Issue

I want to start a diagnostic session with TLS but the following SSL error is logged:

What can I do?

Solution

The target port 13400 has been used instead of 3496. Usually DoIP + TLS runs on port 3496 instead of 13400. Then ecu.test sends its ClientHello message but the ECU does not use TLS on this port. Therefore it sends a DoIP-NACK which is then interpreted as a bad TLS packet by ecu.test, which triggers the described "wrong version" error.