Forum Discussion

Merry95_171142's avatar
Merry95_171142
Icon for Nimbostratus rankNimbostratus
Feb 18, 2015

SSL Error when requests come from proxy

Hello, I have a problem with some Virtual Servers on LTM.   I use SSLClient Profiles so the dialog between F5 and server is uncrypted. All the parameters are the default ones.   This configura...
Merry95_171142's avatar
Merry95_171142
Icon for Nimbostratus rankNimbostratus
Feb 18, 2015

Actually, I have no error log in /var/log/ltm, and the errors the client is sending us are :

 

  • a java error

16/02 16:19:16 [ERROR] ue.GestionPreconisationFacadeMetier - log exception CEC, error message: ; nested exception is: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure '

 

  • a Proxy error (Bluecoat)

Feb 17 11:26:51 STIB0515 2015-02-17 10:26:39 15 - 172.30.201.132 172.30.201.139 - - - PROXIED "none" - 200 TCP_ACCELERATED CONNECT - tcp wscontrat.rmoa.xxx.fr 8096 / - - "Mozilla/5.0 (Windows NT 5.1; rv:35.0) Gecko/20100101 Firefox/35.0" 172.30.201.139 39 268 0 - "unavailable" "unavailable" - - identity - - 172.30.201.139 - tcp://wscontrat.rmoa.xxx.fr:8096/ Feb 17 11:26:51 STIB0515 2015-02-17 10:26:39 25 - 172.30.201.132 172.30.101.132 - - - PROXIED "none" - 0 FAILED unknown - ssl wscontrat.rmoa.xxx.fr 8096 / - - - 172.30.201.139 0 0 0 - "unavailable" "unavailable" - - - - - 172.30.101.132 - ssl://wscontrat.rmoa.xxx.fr:8096/

 

  • I have also a pcap that shows a client Hello, and then a Handshake Failure (Level: Fatal, Description: Handshake Failure) in SSLv3
  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Feb 18, 2015
    It sounds like your proxy and you client ssl profile don't have an overlap in you configured SSL ciphers list. What's you BigIP version, client ssl profile ciphers list, and the list/ssl version in the client Hello?