handshake_failure

Thanks Aaron!

 

 

I have tried s_client and I see the following (handshake failure):

 

 

openssl s_client -connect www.xyz.com:443 -CAfile ../../IssuingCA.cer

 

CONNECTED(00000004)

 

depth=1 /emailAddress=email@xyz.com/C=**/ST=**/L=***/O=Corp./OU=Corporate/CN=Corp. CA

 

verify error:num=2:unable to get issuer certificate

 

issuer= /emailAddress=cisinfrastructure@aes.com/C=**/ST=**/L=***/O=The XYZ Corp./OU=Corporate/CN=Root CA

 

verify return:0

 

1618:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226:

 

 

It works fine with no issues from browser. We started seeing issues with java clients after upgrading LTM.

 

 

I have not made success yet to decrypt tcpdump file using ssldump.

 

 

Thanks in advance.