Forum Discussion
Nimbostratusconfirm client TLS cert and Cipher
hello,
i have a VS with client SSL profile has 2 certificates and when client try to connect i can see on profile statistics that he has invalid certificate and when i captured the traffic i didn't see any TLS handshake only TCP!!!, from his side he sent to me a log file that confirm that he is using the right client certificates and one of F5 default TLS1.2 cipher suite with error of TLS handshake failure....
From F5 side how can i make sure of the certificates he is connected with and its cipher ??????
AhmedGalal219_3nothing???
Stanislas_Piro2Cumulonimbus
If in capture, you don’t see TLS handshake, you can’t do anything on f5 side!!!
In TLS, the first packet is CLIENTHELLO from client. If the client doesn’t send it, the F5 will reject the connection.
What port are you using on your VIP? 443? if not then it might happen that wireshark can not decode it. Just decode the traffic as SSL and you should see ssl traffic.
Also check if the client hits the big-ip at all.
