For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Oct 24, 2018

SSL handshake is not getting completed.

Hi Guys, I am getting below mentioned error when doing curl and SSL handshake is also note getting completed. Only client Hello is being send.Can any one please suggest what error it can be?   suc...
application delivery
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Oct 30, 2018

Hi Nilesh,

 

Before using this command:

 

ssldump -nr /var/tmp/www-ssl-client.cap

 

You have to capture traffic:

 

cpdump -vvv -s 0 -nni external -w /var/tmp/www-ssl-client.cap host xxx.xxx.xxx.xxx and port 443

 

As you told before your VS is in L4 so the handshake ssl is done with your backend server (Between Client and backend server, F5 don't intercept ssl traffic). so is not F5 that sending SSLv3, TLS handshake, Client hello (1): to server.

 

The handshake ssl is done between client and backend server.

 

So you have 2 solution in order to resolve your issue. intercept traffic (SSL interception in F5) or talk with app owner in order to modify his Cipher/protocol.

 

regards