For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

LyonsG_85618's avatar
LyonsG_85618
Icon for Cirrostratus rankCirrostratus
Jun 09, 2014

ServerSSL profile issues after upgrade to v11.4.1

Hi. I am in processing of upgrading from 10.2.4HF5 to 11.4.1HF3 and have hit a problem that i cannot resolve. Basically one of my ServerSSL profiles is failing after upgrade. If I remove the prof...
application delivery
devops
iRules
mickey0141_1330's avatar
mickey0141_1330
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

I had a similar issue when upgrading from 10.2.1 to 11.4.1. I also had to reconfigure the SSL renegotation settings due to the RFC5746 issue. From the F5 try opening a test SSL session to the server: openssl s_client -connect 123.123.123.123:443 and then note the cipher in use on the remote device.

 

SSL-Session: Protocol: TLSv?? Cipher: ????

 

Have a look at the difference in protocols in the cipher suites between the versions:

 

Version 10:

 

http://support.f5.com/kb/en-us/solutions/public/10000/200/sol10262.html

 

Version 11:

 

http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html

 

The solution for my problem was to disable TLSv1.1 and TLSv1.2 in the options section of the profile:

 

Enabled Options: No TLSv1.1 No TLSv1.2

 

I hope this helps.