For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bernardo_Riveir's avatar
Bernardo_Riveir
Icon for Nimbostratus rankNimbostratus
Feb 12, 2014

SSL client profile, with client certificate auth, stopped working this week with Firefox 27.0 update

is anyone else suffering this very problem? all our Firefox users cannot log in to our website using their client certificates since 27.0 version, although they could with 26.0; (but this same versi...
application delivery
availability
devops
iRules
management
security
Thomas_Schocka1's avatar
Thomas_Schocka1
Icon for Altocumulus rankAltocumulus
Mar 13, 2014

Hi,

 

I recently ran into a problem that had something to do with the SSL Handshake timeout value being changed from 60 seconds to 10 seconds, and a lot of browser-middleware couldn't handle that.

 

i.e. they open a connection, send the client hello, server replies with server hello and asks for cert, then the middleware kicks in to ask you the PIN etc, this "entering PIN procedure" probably takes more than 10 seconds, causing the F5 to reset the connection due to handshake timeout being 10 seconds.

 

Have you checked with a packet capture to see what is actually happening? Packets never lie! :)

 

Kind regards,

 

Thomas