Forum Discussion

Ajit's avatar
Ajit
Icon for Altostratus rankAltostratus
Jun 22, 2018

SSL handshake failure using serverssl (F5 and Citrix Netscaler)

Hello F5 Experts, I am getting fatal ssl handshake failure(40) right after the server hello message from the Citrix Netscaler which sits and the vendor location. I can see in wireshark that the TLS...
BIG-IP
LTM
security
  • Anesh's avatar
    Anesh
    Jun 25, 2018

    can you change Secure Negotiation to Request and test

     

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jun 25, 2018

I see you have a Comodo certificate in the serverssl, does that mean the netscaler is expected the bigip to send a certificate? This is similar to client authentication and you would only have a cert/key here if the other end needed the bigip to send a certificate to authenticate itself against the backend. Normally this is not required.

 

For a test have you tried the default serverssl profile?