Forum Discussion
mvukusic
Altocumulus
AltocumulusiRule Editor can't connect to v14
Hi, after upgrade to version 14 (14.1.0.5) I can't connect to Viprion via iRule Editor. It gives me "Invalid Connection Information..." error. Has anybody experienced the same issue? Any ideas...
Hi Marko,
Are you connecting via the management IP/interface? If you are then I think the issue might be caused by v14 no longer allowing TLSv1 by default as seen below.
Prior to version 14.0.0:
# tmsh list sys httpd ssl-protocol
sys httpd {
ssl-protocol "all -SSLv2 -SSLv3"
}
Beginning in version 14.0.0:
# tmsh list sys httpd ssl-protocol
sys httpd {
ssl-protocol "all -SSLv2 -SSLv3 -TLSv1"
}
To work around that you can modify the allowed protocols and remove the "-TLSv1" part of the string. Please note that this will allow TLSv1 again. It is up to you to determine if that is acceptable for your environment.
# tmsh modify sys httpd ssl-protocol 'all -SSLv2 -SSLv3'
Please also note that I have not personally tested the iRule editor on v14 so you will need to test this to see if it resolves your issue. Please let us know if it does as well.
Nathan_F__F5_
Employee
EmployeeHi Marko,
Are you connecting via the management IP/interface? If you are then I think the issue might be caused by v14 no longer allowing TLSv1 by default as seen below.
Prior to version 14.0.0:
# tmsh list sys httpd ssl-protocol
sys httpd {
ssl-protocol "all -SSLv2 -SSLv3"
}
Beginning in version 14.0.0:
# tmsh list sys httpd ssl-protocol
sys httpd {
ssl-protocol "all -SSLv2 -SSLv3 -TLSv1"
}
To work around that you can modify the allowed protocols and remove the "-TLSv1" part of the string. Please note that this will allow TLSv1 again. It is up to you to determine if that is acceptable for your environment.
# tmsh modify sys httpd ssl-protocol 'all -SSLv2 -SSLv3'
Please also note that I have not personally tested the iRule editor on v14 so you will need to test this to see if it resolves your issue. Please let us know if it does as well.