Forum Discussion

Andrei_Popiste1's avatar
Andrei_Popiste1
Icon for Nimbostratus rankNimbostratus
Jan 17, 2011

SSL serverside cipher mismatch

In a hardware-based 10.2(+HF2) LTM installation, LTM cannot negotiate cipher with an IIS6 server (ssldump reports a TCP close sequence after client hello).     Default https monitor reports TLS...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Jan 19, 2011
The monitoring daemon, bigd, probably does not use the native TMM SSL stack. So I think you're right on it using the openssl ciphers. I'm surprised that using COMPAT (openssl ciphers) in the client SSL profile wouldn't work if the monitor succeeds.

 

 

It might be worth opening a support case on this as they'll be able to test directly with you.

 

 

Aaron