handshake_failure

Hi bhargav,

 

 

I'd suggest using ssldump to decrypt the trace. It should give you a more specific error.

 

 

Why do you have the client SSL profile set to request a client cert? Is the application expecting the client to send a client cert? If so, how is it getting the details of the client cert if you're decrypting the traffic on LTM?

 

 

You should be able to find more info on the error strings through any search engine as they're standard openssl error messages. For details on the SSL profile options, you can check the LTM config guide for your version. Here is a link to the latest 9.4.x guide (Click here)

 

 

Aaron