For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Effrum's avatar
Effrum
Icon for Nimbostratus rankNimbostratus
Mar 01, 2018

Client SSL authentication error - hs msg overflow

I'm trying to set up 2-way SSL with a SSL bridging scenario using LTM 12.1.2. As of right now the "server" side of this is working, with the F5 sending a cert to the server and requiring an auth cer...
application delivery
LTM
security
Effrum's avatar
Effrum
Icon for Nimbostratus rankNimbostratus
Mar 09, 2018

For anyone having a similar issue, it turns out the problem was using the default ca-bundle on the F5 for the "Advertised Certificate Authorities" portion of client auth. It appears that some servers require that this field NOT be NULL, but sending the default ca-bundle was too large for the SSL handshake. I created a new CA bundle using only the public cert of our internal CA and it worked.