Forum Discussion

Frank_ten_Wolde's avatar
Frank_ten_Wolde
Icon for Altostratus rankAltostratus
Feb 05, 2026

sslprovide (--f5 ssl) does not generate CLIENT/SERVER_TRAFFIC_SECRET on server-side TLS traffic

When I enable the sslprovider and start a tcpdump on the server-side in order to decode TLSv1.3 traffic, only the CLIENT_HANDSHAKE_TRAFFIC_SECRET and SERVER_HANDSHAKE_TRAFFIC_SECRET 'keys' are stored...
application delivery
security
  • Frank_ten_Wolde's avatar
    Frank_ten_Wolde
    Icon for Altostratus rankAltostratus
    Feb 09, 2026

    Hi Momahdy,

    Thanks for pointing me to this KB article. I am aware of the 'iRule-way' to get the PMS data.

    The observed sslprovider behaviour (missing CLIENT_TRAFFIC_SECRET_0 and SERVER_TRAFFIC_SECRET_0 data) sort of defies the purpose of it, doesn't it?

    Should I report a bug with F5 TAC, or is this a known issue already?

    • momahdy's avatar
      momahdy
      Icon for Employee rankEmployee
      Feb 09, 2026

      Hi Frank_ten_Wolde​  
      Got what you mean, I don't see published IDs on this one,  If you may try couple of items and reach to TAC if the same behavior continues, 

      - Make sure to include the p option,
      tcpdump -i <server-side-VLAN>:nnnp -s0 -f5 ssl:v -vvv -w /var/tmp/output.cap