For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Naresh_N's avatar
Naresh_N
Icon for Nimbostratus rankNimbostratus
Nov 13, 2015

SSL handshake errors

Hi there,   Recently put TMOS version 12 into production and see following SSL handshake errors, none of which existed in version 10.2.3:   Nov 12 03:15:36 dc1lbc2p info tmm[11446]: 01260013:6:...
BIG-IP
clientssl
LTM
openssl
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 17, 2015

Great, so first step is to turn it off at the server. If you can't do that, try this simple iRule to remove it from responses:

when HTTP_RESPONSE {    
    if { [HTTP::header exists "Strict-Transport-Security" } {        
        HTTP::header remove "Strict-Transport-Security"
    }
}

If that does the trick, then you just need to wait that 500 seconds for the cache to timeout and then try again.