For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Merry95_171142's avatar
Merry95_171142
Icon for Nimbostratus rankNimbostratus
Mar 03, 2015

Handshake SSL failed for the HTTPS monitor

Hello,   I have a problem with the HTTPS monitor. When no monitor, the traffic is transmitted, and I can see a successfull SSL handshake between F5 and the client, and F5 and the server, using TLS...
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Mar 03, 2015

The HTTPS monitor run in bigd, which uses the OpenSSL cipher suite(COMPAT). Your client and server SSL profiles use the NATIVE cipher suites. Your handshake failure suggests no overlap in cipher suites. I would verify via packet capture that the cipher list sent by the monitor has overlap with your server.

 

What BigIP version are you running? I wonder if the problem you are having with TLSv1.2 in the OpenSSL cipher suite is similar to what I have found with iControl stuff not working with TLSv1.2.