For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

midhun_108442's avatar
midhun_108442
Icon for Nimbostratus rankNimbostratus
Jan 28, 2015

Montoring https port in windows server 2012 is not working with F5

Hi,   We have server listening on port 443 behind F5, The pool members is unable to monitor the server on port 443.   Kindly advice   Regards, Midhun p.K  
midhun_108442's avatar
midhun_108442
Icon for Nimbostratus rankNimbostratus
Feb 02, 2015

Hi Stephan,

 

Find the below output.

 

openssl version

OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

 

curl --version

curl 7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5 Protocols: tftp ftp telnet dict ldap http file https ftps Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz

 

curl -k -v https://192.168.249.21
  • About to connect() to 192.168.249.21 port 443
  • Trying 192.168.249.21... connected
  • Connected to 192.168.249.21 (192.168.249.21) port 443
  • successfully set certificate verify locations:
  • CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none
  • SSLv2, Client hello (1): Unknown SSL protocol error in connection to 192.168.249.21:443
  • Closing connection 0 curl: (35) Unknown SSL protocol error in connection to 192.168.249.21:443
openssl s_client -connect 192.168.249.21:443

CONNECTED(00000003) write:errno=104

 

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Feb 02, 2015
    Hi midhun, so obviously even the provided command line tools of your TMOS version are not able to establish an SSL connection. What is the output of "tmsh show sys version | head -n 8" or alternatively "bigpipe version", please? Are you able to establish a connection to your poolmember on SSL level (i.e. via web browser) from another system in your infrastructure? Thanks, Stephan
  • Edgar_Pajuelo_1's avatar
    Edgar_Pajuelo_1
    Icon for Nimbostratus rankNimbostratus
    Aug 19, 2015
    Hello Stephan Do you know if they fixed the problem? We have the same issue. Big-IP 11.5.1 HF3 and SSL from Thawte with SHA-256. And the HTTPS monitors fails down, then, we can not go through F5 and see the the Web pages. But directly to the Web server (without F5) works well.