For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SM_80821's avatar
SM_80821
Icon for Nimbostratus rankNimbostratus
Jun 25, 2010

F5 end to end ssl with Win2k8R2 doesnt work

Hi     I have following topolgy where end to end ssl does not work with F5 proxy.     client (winxp or any)--[ssl]---F5--[ssl]--Server (windows2008R2)     -Just ssl termination on F5...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 11, 2010
I think the 2048 bit cert/key limit is only for certs and keys that you import into LTM (and only for versions lower than 10.2.0). So server side SSL shouldn't be affected by the server using a 4096 bit cert/key. It would break if you were usng a client cert/key in the server SSL profile that was over 2048 bits.

 

 

SM's problem sounds like it might be related to the SSL ciphers not being negotiated successfully between LTM and the server(s).

 

 

Aaron