For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

emilio_104458's avatar
emilio_104458
Icon for Nimbostratus rankNimbostratus
Nov 04, 2015

server ssl connection problem after upgrading to 12.0 version

Hi all,

 

i have virtual server configured like this: - own profile ssl_client - irule with url wrapping - profile server_ssl to connection in ssl to backend server (jboss)

 

with the 11.3 version all works fine. When i upgraded my F5 to version 12.0 and import all configurations this virtual server fail to connect to backend servers in https.

 

something is changed with 12.0 in server_ssl profile?

 

I try to restore the 11.3 version (using the switchboot) and all return to works.

 

i switched again to 12.0 and continue to not work. i try to create my own server_ssl profile with the same root CA of the backend server, but still not work.

 

can anyone have ideas to resolve this issue?

 

thanks a lot

 

3 Replies

  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Icon for Nacreous rankNacreous
    Nov 04, 2015

    Hi,

     

    I think the issue in SSL ciphers wich used in the default SSL profiles, they differ in 11.3 and 12.0. You need to check the ciphers suite in server ssl profile.

     

    • Vitaliy_Savrans's avatar
      Vitaliy_Savrans
      Icon for Nacreous rankNacreous
      Nov 04, 2015
      SSL ciphers used in the default SSL profiles https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html
    • emilio_104458's avatar
      emilio_104458
      Icon for Nimbostratus rankNimbostratus
      Nov 04, 2015
      thank u for ur reply... i'm starting to test usign my own server ssl profile with the cypher suite defined in the 11.3 version. i will let u know if it works. thanks