Forum Discussion

Noom_39572's avatar
Noom_39572
Icon for Nimbostratus rankNimbostratus
Oct 21, 2013

https not working with http profile

I have a strange issue with http profile. My version is 10.2.2. We have VIPs that use SSL client to de-encrypted and SSL Server to re-encrypted to backend servers. also http profile were used for iRu...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 21, 2013

Any chance that you have some custom settings in your server SSL profile? Take a look at your LTM log while testing:

tail -f /var/log/ltm

Do you see any references to RFC 5746 and secure renegotiation? Any chance that the SSL configuration on the IIS8 server is different than the IIS6?

Worst case you can do the following:

  1. Run a TCPDUMP on the internal (web server facing) interface. If you see traffic going to the web server (but failing), then you're pretty certain that the client SSL settings are good.

  2. Run an SSL dump on the internal (web server facing) interface. More information on how to set that up is below. You're looking for specific SSL-related anomalies. If there's a problem with the SSL negotiation, you should see that in the capture.

https://devcentral.f5.com/articles/troubleshooting-tls-problems-with-ssldump.UmV4-xCK7wQ