For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kurt_Knochner_5's avatar
Kurt_Knochner_5
Icon for Cirrus rankCirrus
Oct 25, 2011

Event Notification with PERL and SSL/TLS

Hi,     I'm using the PERL sample for Event Notification (http://devcentral.f5.com/wiki/iControl.EventNotificationListener.ashx). It works fine, as long as I'm using HTTP as the transport method...
dev
devops
iControl
Kurt_Knochner_5's avatar
Kurt_Knochner_5
Icon for Cirrus rankCirrus
Oct 25, 2011
UPDATE: I've done some further checks. Apparently the perl listener is part of the problem. Sometimes it dies directly after the SSL CLIENT HELLO (coming from the LB), however only if I start the SOAP Server with the option TLSv1, which is strange, as eventd offers TLSv1 anyway !?!? Seems to be a bug in the perl IO library.

 

 

So, one part of the problem is the perl script.

 

 

However, in debug mode I was unable to reproduce the second problem ("stuck" eventd). It will now allways retry to connect to the server, maybe due to the FIN/RST of the TCP connection after the script died !??! I don't get it. There's something different in debug mode.

 

 

Anyway, I will simply not start the SOAP server with the option TLSv1, as eventd is using that anyway and I will restrict access to my listener port by using TCP wrapper or iptables.

 

 

So: problem understood (partly) and the workaround is acceptable :-)

 

 

Regards

 

Kurt