Forum Discussion

Effrum's avatar
Effrum
Icon for Nimbostratus rankNimbostratus
Mar 01, 2018

Client SSL authentication error - hs msg overflow

I'm trying to set up 2-way SSL with a SSL bridging scenario using LTM 12.1.2. As of right now the "server" side of this is working, with the F5 sending a cert to the server and requiring an auth cer...
application delivery
LTM
security
Effrum's avatar
Effrum
Icon for Nimbostratus rankNimbostratus
Mar 09, 2018

For anyone having a similar issue, it turns out the problem was using the default ca-bundle on the F5 for the "Advertised Certificate Authorities" portion of client auth. It appears that some servers require that this field NOT be NULL, but sending the default ca-bundle was too large for the SSL handshake. I created a new CA bundle using only the public cert of our internal CA and it worked.