For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

voot_18676's avatar
voot_18676
Icon for Nimbostratus rankNimbostratus
Jul 02, 2014

F5 ssl error on first visit

Hello, Appears we're having the same issue as this https://devcentral.f5.com/questions/f5-ssl-offload-error-on-first-visit-to-site-against-an-https-page. The link provided by someone with a possible answer doesn't work. We are encountering a Page can't be displayed error when visiting a ssl configured site in IE 10, but if we refresh it works. There are no issues with the non-ssl site. We cannot test in another browser due to restrictions. We are using BIG-IP 11.4.1. Thanks

 

application delivery
LTM
management

3 Replies

  • Mahmoud_Eldeeb_'s avatar
    Mahmoud_Eldeeb_
    Icon for Cirrostratus rankCirrostratus
    Jul 02, 2014

    most probably it is browser issue. i face it before with Firefox, and after upgrade Firefox to latest version it works fine

     

    • voot_18676's avatar
      voot_18676
      Icon for Nimbostratus rankNimbostratus
      Jul 02, 2014
      Thanks. That doesn't make me feel any better! What is the fundamental problem here? I thought it might be the F5 trying to force certain ssl ciphers/protocols to be used on first visit?
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 02, 2014

    Are you re-encrypting to the back end? If so, can you determine if the issue is client side or server side?

    I would run an SSLDUMP capture on the client side first to see if there's any anomalous errors in that first request.

    ssldump -k [path to private key applied to VIP[ -AnNd -i 0.0 port 443

    You may want to add some additional filters to the above to weed out other traffic. If this looks good, and you're re-encrypting on the server side, perform the same SSLDUMP test there against the web server's private key.