For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nuruddin_Ahmed_'s avatar
Nuruddin_Ahmed_
Icon for Cirrostratus rankCirrostratus
May 31, 2016

Proxy SSL

Hi, I've been trying to make proxy ssl feature work since a long time but unfortunately no luck. I am still in learning mode on F5 products. I have clients which would require updates from one micros...
application delivery
BIG-IP
Nuruddin_Ahmed_'s avatar
Nuruddin_Ahmed_
Icon for Cirrostratus rankCirrostratus
Jun 01, 2016

Could it be because of cipher suite unknown value -

40 2 0.0036 (0.0029) S>CV3.1(3605) Handshake

  ServerHello
    Version 3.1
    random[32]=
      57 4e 87 80 a6 10 2d a8 57 77 93 4b 02 d0 a8 4b
      c6 f4 ca 77 59 b3 9c 16 57 c3 84 d1 1b c4 dd 2f
    session_id[32]=
      af 1e 00 00 b6 6b 3a 8f f7 b7 fd bf fa f0 bf 22
      4a 71 b2 3b 41 49 fa 62 84 e8 aa 90 d7 f7 b0 3e
    **cipherSuite         Unknown value 0xc014**
    compressionMethod                   NULL
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jun 01, 2016
it could be, although i don't see that in the logs above. anyway, if the client is 3.0 then this is the maximum SSL version it supports i.e. SSL v3. if the server responds with 3.1 then this is telling the client it only supports tls 1.0 or above. this will be a problem