Forum Discussion

Naresh_N's avatar
Naresh_N
Icon for Nimbostratus rankNimbostratus
Nov 13, 2015

SSL handshake errors

Hi there,   Recently put TMOS version 12 into production and see following SSL handshake errors, none of which existed in version 10.2.3:   Nov 12 03:15:36 dc1lbc2p info tmm[11446]: 01260013:6:...
BIG-IP
clientssl
LTM
openssl
security
Naresh_N's avatar
Naresh_N
Icon for Nimbostratus rankNimbostratus
Nov 20, 2015

Here is another commonly failing handshake:

Captured 3 different streams from 3 clients, fails right after ServerHelloDone. Client sends finish, not sure why.

154 1  1448055928.8001 (0.1000)  C>SV3.1(175)  Handshake
154 2  1448055928.8013 (0.0011)  S>CV3.3(91)  Handshake
154 3  1448055928.8013 (0.0000)  S>CV3.3(2488)  Handshake
154 4  1448055928.8013 (0.0000)  S>CV3.3(365)  Handshake
154 5  1448055928.8013 (0.0000)  S>CV3.3(4)  Handshake
ServerHelloDone
154    1448055928.9049 (0.1035)  C>S  TCP FIN
154    1448055928.9049 (0.0000)  S>C  TCP FIN

406 1  1448055941.9187 (0.2517)  C>SV3.1(114)  Handshake
406 2  1448055941.9196 (0.0009)  S>CV3.1(80)  Handshake
406 3  1448055941.9196 (0.0000)  S>CV3.1(2488)  Handshake
406 4  1448055941.9196 (0.0000)  S>CV3.1(525)  Handshake
406 5  1448055941.9196 (0.0000)  S>CV3.1(4)  Handshake
ServerHelloDone
406    1448055942.2304 (0.3107)  C>S  TCP FIN
406    1448055942.2306 (0.0001)  S>C  TCP FIN

604 1  1448055950.8339 (1.0157)  C>SV3.1(233)  Handshake
604 2  1448055950.8351 (0.0012)  S>CV3.3(91)  Handshake
604 3  1448055950.8351 (0.0000)  S>CV3.3(2488)  Handshake
604 4  1448055950.8351 (0.0000)  S>CV3.3(333)  Handshake
604 5  1448055950.8351 (0.0000)  S>CV3.3(4)  Handshake
ServerHelloDone
604    1448055951.8045 (0.9693)  C>S  TCP FIN
604    1448055951.8046 (0.0001)  S>C  TCP FIN