For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

julian_mata_164's avatar
julian_mata_164
Icon for Nimbostratus rankNimbostratus
Nov 06, 2015

IIS and SSL Profile Handshake failure Help!!

Hey Folks , Im currently running into an issue where I'm trying to upload a IIS cert ex. wildcard.pfx but was renamed to .crt so the f5 can accepted it.So when looking at the cert inside the f5 it do...
julian_mata_164's avatar
julian_mata_164
Icon for Nimbostratus rankNimbostratus
Nov 06, 2015
when CLIENT_ACCEPTED {
     Save the name of the VS default pool    
    set default_pool [LB::server pool]
}

when HTTP_REQUEST {
if {[string tolower [HTTP::uri]] starts_with "/cardonfile"} {
     Update the location in the header, change SSL "Server" profiles and target the correct pool
       HTTP::header replace Location "[HTTP::uri]"     
       SSL::session invalidate
       set cmd "SSL::profile /Common/AprivaServer"
       eval $cmd
       pool AIB_115_CardOnFile
       SSL::renegotiate
    } else {
      pool $default_pool
    }
  }