For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Umesh_95487's avatar
Umesh_95487
Icon for Nimbostratus rankNimbostratus
Jul 21, 2014

Mutual SSL implementation using Layer 4 forwarding

Would it be possible to configure two-way SSL using layer 4 forwarding(Passthrough LB configuration)?

 

Our application is trying to authenticate client certificates but the connection fails with the below error -

 

SSL session initialization error, SSL_connect/accept failed, SSL_ERROR_SSL: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate s3_srvr.c:3274 PeerIP=10.10.10.15

 

Where 10.10.10.15 is the SNAT IP of the virtual server. As per the above log, server is trying to obtain certificate from the LTM and is failing.

 

Is it possible to setup 2-way ssl using Layer 4 forwarding or do I need to setup 2 way SSL at the LTM by using a standard type virtual server and terminating the ssl?

 

application delivery
cloud
devops
iRules
LTM
management
security
vmware

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 22, 2014

    In the absence of client and/or server SSL profiles applied to the VIP, SSL traffic should pass directly through to the server. You should be able to create a standard type VIP and not apply SSL profiles, or possibly any other type of forwarding VIP.