For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Qasim's avatar
Qasim
Icon for Cirrostratus rankCirrostratus
Aug 08, 2019

SSL Troubleshoot (fatal Description : handshake failure)

Hi,   I have a service that run in two DCs one primary and another secondary. the service is configured like the following:   Client --> tcp/443 LTM ----->tcp/80 backend.   however, the ...
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Aug 08, 2019

Hello Qasim

It could be many things starting from release version and ending to certificate (and a lot of things more).

I recommend you to connect using openssl and try to figure out the error message.

openssl s_client -connect <virtual_server>:<port>

Also in /var/log/ltm you could have more info about the error. You could also disable 'Generic Alert' in your SSL profile to get more info.

There is a great guide for troubleshooting this issue here

https://support.f5.com/csp/article/K15292

KR,

Dario.

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Aug 08, 2019

    BTW, SSLv3 seems a very poor cipher suite...

     

    Maybe the cipher set is different in both DC.