For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

InfoSec_38553's avatar
InfoSec_38553
Icon for Nimbostratus rankNimbostratus
Dec 27, 2010

help me with handshake logs

Hi,     I'm experienced error while third party was trying to connect to my service using client certificate.     I did tcpdump attached the result.     Can you help me to find the ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 27, 2010
Hi InfoSec,

The ssldump output shows the server rejected the client's certificate: 


1 7  1293361272.9715 (0.0011)  S>CV3.1(2)  Alert
    level           fatal
    value           handshake_failure

If you can get a copy of the client's cert and key, you could test this yourself. The first thing I'd try is to use openssl s_client to check that the client cert is valid for the server cert.

http://www.openssl.org/docs/apps/s_client.html

Aaron