Forum Discussion

Ajit's avatar
Ajit
Icon for Altostratus rankAltostratus
8 years ago
Solved

SSL handshake failure using serverssl (F5 and Citrix Netscaler)

Hello F5 Experts, I am getting fatal ssl handshake failure(40) right after the server hello message from the Citrix Netscaler which sits and the vendor location. I can see in wireshark that the TLS...
big-ip
LTM
security
  • Anesh's avatar
    Anesh
    8 years ago

    can you change Secure Negotiation to Request and test

     

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
8 years ago

I see you have a Comodo certificate in the serverssl, does that mean the netscaler is expected the bigip to send a certificate? This is similar to client authentication and you would only have a cert/key here if the other end needed the bigip to send a certificate to authenticate itself against the backend. Normally this is not required.

 

For a test have you tried the default serverssl profile?