For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OTS02's avatar
OTS02
Icon for Cirrus rankCirrus
Dec 04, 2015

server-side ssl not negotiating

I have a standard Virtual Server (443) that terminates ssl on the client side, and re-encrypts on the server side. Just as I have done many times.   LTM logs (ssl debug) yields:   01260013 SS...
application delivery
LTM
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Dec 08, 2015

I made the server-side SSL profile cipher string = 'TLSv1' only and that made it work.

 

This is because Windows 2008 no R2 doesn't understand TLSv1.2 handshake initiation and it never allows it to negotiate down to TLSv1.

 

Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Dec 08, 2015
A browser will retry the whole connection and has a different SSL stack than BigIP so the client behavior can be different.