Forum Discussion

W__Tout_99150's avatar
W__Tout_99150
Icon for Nimbostratus rankNimbostratus
Mar 07, 2013

SSL handshake failure

Hello,   we're seeing a weird behaviour during SSL handshake where the client (on an Android mobile device) sends the ClientHello to the LB but the LB does not send back the ServerHello. We see th...
app sec
BIG-IP Access Policy Manager (APM)
security
W__Tout_99150's avatar
W__Tout_99150
Icon for Nimbostratus rankNimbostratus
Mar 08, 2013
@Nitass, there is nothing logged in /var/log/ltm for the failing requests and the problem is observed only with resumes.

 

 

@Nathan, the certificate is a wildcard certificate with a key length of 2048. It works from both a browser and from Android devices.

 

 

We only see the problem occasionally but consistently with ssl session resumes (sessionid included in ClientHello) and with "SSL Record Layer" displayed under "Secure Sockets Layer" as can be seen in the attached file. No failures were/are observed with "SSLv3 Record Layer" or "TLSv1 Record Layer" be it a new ssl connection or a resume.