Forum Discussion

Daniel_Tavernie's avatar
Daniel_Tavernie
Icon for Cirrostratus rankCirrostratus
Oct 10, 2013

Chrome v30 Triggers v10.2.x TLS and ClientHello Bugs -- Sites Down

The recent upgrade to Chrome v30 exploits a bug in 10.2.x where the BIG-IP refuses to respond to ClientHello with ServerHello. I am trying to determine in what version(s) this is actually fixed.   ...
availability
BIG-IP Access Policy Manager (APM)
security
ssl
tls
Daniel_Tavernie's avatar
Daniel_Tavernie
Icon for Cirrostratus rankCirrostratus
Oct 18, 2013

F5 has developed an Engineering Hotfix for those on 10.2.3 HF1 that cannot upgrade to 10.2.4 or 11.x. (Upgrading to 10.2.4+ takes care of a lot of other bugs and is worth doing, but may be a longer-term fix.) Open a case with F5 and refer the engineer to SR1-313410437 (ticket) for full details.