Forum Discussion

Icon for MVP rank

MVP

Mar 31, 2020

Can I display ssl handshake fail reason using irule?

Hi guys I need your help

Can I display ssl handshake fail reason using irule?

I have list of ssl handshake failure alert but I don't know how to define alert using irule

ex) 40 is The sender was unable to negotiate an acceptable set of security parameters given the options available.

please let me know if you know way

thank you

application delivery

Simon_Blakely
Mar 31, 2020
No - you need to use SSL debug logging (for BigIP versions prior to 12.0.0)

K09322055: The BIG-IP system now logs debug SSL errors through standard logging

K15475: Troubleshooting SSL/TLS renegotiation

Simon_Blakely
Employee
Mar 31, 2020
No - you need to use SSL debug logging (for BigIP versions prior to 12.0.0)

K09322055: The BIG-IP system now logs debug SSL errors through standard logging

K15475: Troubleshooting SSL/TLS renegotiation
- neeeewbie
  MVP
  Apr 03, 2020
  thank you for share your knwoledge
  
  So, can I display other log when " Connection error: hud_ssl_handler:1289: codec alert (20) " log display ? like " display codec alert (20) is occur cause Using Diffie-Hellman (DH) ciphers "