For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anesh's avatar
Anesh
Icon for Cirrostratus rankCirrostratus
May 10, 2017

SSL Forward proxy Bypass iRule not working

The below irule does not Bypass SSL forward proxy function for url's defined in the Bypass datagroup, it continues to re-sign with the certificate provdied by F5... when CLIENTSSL_CLIENTHELLO { ...
iRules
LTM
security
Anesh's avatar
Anesh
Icon for Cirrostratus rankCirrostratus
May 11, 2017

Get below error when doing curl to ssl explicit forward proxy vip

* About to connect() to proxy 10.13.22.6 port 8080 (0)
*   Trying 10.13.22.6... connected
* Connected to 10.13.22.6 (10.13.22.6) port 8080 (0)
* Establish HTTP proxy tunnel to www.365online.com:443
> CONNECT www.365online.com:443 HTTP/1.1
> Host: www.365online.com:443
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 OpenSSL/1.0.1l zlib/1.2.3 libidn/0.6.5
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connected
<
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Proxy replied OK to CONNECT request
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSLv3, TLS handshake, Client hello (1):
} [data not shown]
* Unknown SSL protocol error in connection to www.365online.com:8080
* Closing connection 0

curl: (35) Unknown SSL protocol error in connection to www.365online.com:8080