handshake_failure when accessing an F5 from WebSphere

Hi all.

 

 

We have a problem when accessing a web service through an F5 server. We are using WebSphere appliation server 6.1 on Solaris, and when we try to stablish the connection we get a handshake_failure error.

 

 

The server uses Axis 2 to establish the connection.

 

 

This is what we have received from placing the F5 in debug mode:

 

 

New TCP connection 3: 212.163.166.193(40209) <-> 192.168.115.67(443)

 

3 1 1331570808.5240 (0.0702) C>SV3.0(83) Handshake

 

ClientHello

 

Version 3.0

 

random[32]=

 

4f 5e 29 a6 55 47 da 97 ca 46 58 5c 2c 93 d0 7f

 

e2 21 4f b8 8f 26 e3 ab e2 27 a5 7c 36 77 24 58

 

cipher suites

 

SSL_RSA_WITH_RC4_128_MD5

 

SSL_RSA_WITH_RC4_128_SHA

 

SSL_RSA_WITH_AES_128_CBC_SHA

 

SSL_DHE_RSA_WITH_AES_128_CBC_SHA

 

SSL_DHE_DSS_WITH_AES_128_CBC_SHA

 

SSL_RSA_WITH_3DES_EDE_CBC_SHA

 

Unknown value 0xfeff

 

SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA

 

SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA

 

SSL_DHE_DSS_WITH_RC4_128_SHA

 

SSL_RSA_WITH_DES_CBC_SHA

 

Unknown value 0xfefe

 

SSL_DHE_RSA_WITH_DES_CBC_SHA

 

SSL_DHE_DSS_WITH_DES_CBC_SHA

 

SSL_RSA_EXPORT_WITH_RC4_40_MD5

 

SSL_RSA_EXPORT_WITH_DES40_CBC_SHA

 

SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5

 

SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA

 

SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA

 

Unknown value 0xff

 

compression methods

 

NULL

 

3 2 1331570808.5240 (0.0000) S>CV3.0(81) Handshake

 

ServerHello

 

Version 3.0

 

random[32]=

 

39 84 80 e6 2c b1 af b5 75 28 59 e5 19 12 fa c1

 

f1 59 75 79 a1 e1 51 51 7d 53 65 2d 04 c6 91 5b

 

session_id[32]=

 

94 b7 b4 64 1a ef 55 d9 96 e1 9a b4 1c 52 88 1a

 

3a 51 86 17 6a 74 16 86 5a 3c 8c af bf 90 b5 57

 

cipherSuite SSL_RSA_WITH_3DES_EDE_CBC_SHA

 

compressionMethod NULL

 

3 3 1331570808.5588 (0.0347) S>CV3.0(5030) Handshake

 

Certificate

 

3 4 1331570808.5588 (0.0000) S>CV3.0(4) Handshake

 

ServerHelloDone

 

3 5 1331570808.8578 (0.2990) C>SV3.0(260) Handshake

 

ClientKeyExchange

 

EncryptedPreMasterSecret[256]=

 

34 88 c7 72 66 0b 93 55 28 c7 1e b2 5d 09 da f6

 

16 1e 74 af 27 be 08 1f b6 90 5e 28 5d b6 c6 d9

 

85 f6 4e 90 a7 33 1a 4d 89 e4 73 01 74 b4 43 af

 

07 f5 87 fc a0 f8 ff d6 2d b5 c9 f5 bf a1 d7 6d

 

b7 ec 33 61 cc 11 b9 50 8e 96 09 9d 76 9b e8 c6

 

c8 2c 06 72 17 5b d4 ec ea f5 8e 92 10 33 a6 89

 

8c 33 d9 1a 14 a8 c7 33 e6 1b 89 4b a3 c2 63 74

 

19 82 92 61 16 07 fd 82 b3 6a ee 6c 1b 6f fd 0b

 

78 53 bc e5 c9 23 ea 91 6d 4d d8 fd 46 e5 cd ce

 

45 0c 8e 72 43 f4 f9 f7 90 ad a1 a5 89 f1 8f 5b

 

cb 85 bc bb 49 20 97 0b 07 d1 68 52 88 0a 98 90

 

d2 19 02 7f 28 3b 19 cb 90 08 ab ed b5 23 57 0d

 

10 da 17 e5 34 47 ba de 2d 4c 20 f8 6e e9 49 d9

 

05 f2 4e 5c 0c dc 56 6d 3f 41 64 65 4a 9e ee 70

 

b9 0c bb f6 be 43 0f 44 71 e4 f2 64 87 d5 32 27

 

d3 e7 44 93 64 6f 76 aa 4f 19 8a cd 9d 42 e3 f0

 

3 6 1331570808.8926 (0.0347) C>SV3.0(1) ChangeCipherSpec

 

3 7 1331570808.9216 (0.0289) C>SV3.0(64) bad MAC

 

3 8 1331570808.9217 (0.0001) S>CV3.0(2) Alert

 

level fatal

 

value handshake_failure

 

3 1331570808.9217 (0.0000) S>C TCP FIN

 

3 1331570808.9647 (0.0429) C>S TCP FIN

 

 

 

 

 

 

On the origin (WebSphere) side, we get these log traces:

 

 

[13/03/12 11:45:05:621 CET] 00000017 SystemOut O WebContainer : 0, READ: SSLv3 Alert, length = 2

 

[13/03/12 11:45:05:622 CET] 00000017 SystemOut O WebContainer : 0, RECV SSLv3 ALERT: fatal, handshake_failure

 

[13/03/12 11:45:05:624 CET] 00000017 SystemOut O WebContainer : 0, called closeSocket()

 

[13/03/12 11:45:05:625 CET] 00000017 SystemOut O WebContainer : 0, handling exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handsha

 

ke_failure

 

[13/03/12 11:45:05:626 CET] 00000017 SystemOut O WebContainer : 0, called close()

 

[13/03/12 11:45:05:627 CET] 00000017 SystemOut O WebContainer : 0, called closeInternal(true)

 

[13/03/12 11:45:05:628 CET] 00000017 SystemOut O WebContainer : 0, called close()

 

[13/03/12 11:45:05:629 CET] 00000017 SystemOut O WebContainer : 0, called closeInternal(true)

 

[13/03/12 11:45:05:630 CET] 00000017 SystemOut O WebContainer : 0, called close()

 

[13/03/12 11:45:05:631 CET] 00000017 SystemOut O WebContainer : 0, called closeInternal(true)

 

[13/03/12 11:45:05:634 CET] 00000017 HTTPSender I org.apache.axis2.transport.http.HTTPSender sendViaPost Unable to sendViaPost to url[https://XXXXXXXXXXXXXXXXXXXXXXXXXXX]

 

org.apache.axis2.AxisFault: Received fatal alert: handshake_failure

 

at org.apache.axis2.AxisFault.makeFault(AxisFault.java:430)

 

at org.apache.axis2.transport.http.SOAPMessageFormatter.writeTo(SOAPMessageFormatter.java:83)

 

at org.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:84)

 

at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)

 

at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)

 

at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)

 

 

 

 

Any idea about what can be causing this error?

 

 

Regards.