For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

midhun_108442's avatar
midhun_108442
Icon for Nimbostratus rankNimbostratus
Jan 28, 2015

Montoring https port in windows server 2012 is not working with F5

Hi,   We have server listening on port 443 behind F5, The pool members is unable to monitor the server on port 443.   Kindly advice   Regards, Midhun p.K  
midhun_108442's avatar
midhun_108442
Icon for Nimbostratus rankNimbostratus
Feb 02, 2015

Hi Stephan,

 

Find the below output.

 

openssl version

OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

 

curl --version

curl 7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5 Protocols: tftp ftp telnet dict ldap http file https ftps Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz

 

curl -k -v https://192.168.249.21
  • About to connect() to 192.168.249.21 port 443
  • Trying 192.168.249.21... connected
  • Connected to 192.168.249.21 (192.168.249.21) port 443
  • successfully set certificate verify locations:
  • CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none
  • SSLv2, Client hello (1): Unknown SSL protocol error in connection to 192.168.249.21:443
  • Closing connection 0 curl: (35) Unknown SSL protocol error in connection to 192.168.249.21:443
openssl s_client -connect 192.168.249.21:443

CONNECTED(00000003) write:errno=104

 

StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Feb 02, 2015
Hi midhun, so obviously even the provided command line tools of your TMOS version are not able to establish an SSL connection. What is the output of "tmsh show sys version | head -n 8" or alternatively "bigpipe version", please? Are you able to establish a connection to your poolmember on SSL level (i.e. via web browser) from another system in your infrastructure? Thanks, Stephan