For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Naresh_N's avatar
Naresh_N
Icon for Nimbostratus rankNimbostratus
Nov 13, 2015

SSL handshake errors

Hi there,   Recently put TMOS version 12 into production and see following SSL handshake errors, none of which existed in version 10.2.3:   Nov 12 03:15:36 dc1lbc2p info tmm[11446]: 01260013:6:...
BIG-IP
clientssl
LTM
openssl
security
Naresh_N's avatar
Naresh_N
Icon for Nimbostratus rankNimbostratus
Nov 17, 2015

Kevin,

 

Thanks for looking at it, sorry for the bad formatting. Yes "thawte SHA256 SSL CA" is fine. The clientssl profile that I use here is used in 100s of more VIPs and have no problem with certificate chain. I have tried to use the one with a bad chain and I get a different error - something to the effect "unknown_ca" in packet capture, which I am not seeing here. Since Handshake failed, no application_data started. I am still at a loss to understand why this (and others I sent) failed. One of them only has one line where client makes a new connection to server and fails right after, making no sense of what happened.

 

Naresh