TLS 1.2 fail connetcion

What is the browser error message please? What is the last SSL packet/message you see in the trace?

browser error "page cant be display " and the last message from server is certificate, server hello done

do you have this issue with Network Access? Be aware that TLS 1.2 for NA is supported from v11.2.1 HF6 on. Here from the RN 412084 The network access client now supports TLS1.2.

OK, is the ClientSSL profile configured to require a client certificate perhaps?

we are using LTM. and we dont configure client certificate perhaps

OK, any server-side SSL occuring? You're use of the word 'server' suggests maybe there is. Did you take the capture client-side or server-side?

from server i mean F5 VIP , i took the trace on client side.no server side SSL . when connecting TLS 1.0/SSLv3 everything works fine. thanks

OK, understood, thanks. So, is the certificate signed with MD5 by any chance? There seems to be an issue with this and TLS 1.2.

Still, the odd thing is that SSL seems to be working and negotiated just fine, you just don't get any HTTP passing once the channel has been established. Do you never see data from the client after the ServerHelloDone? If not, that suggests the client is at fault.

Seeing any errors in the logs? You could up the SSL logging to debug via System > Logs > Options or tmsh: 'modify sys db log.ssl.level value debug'. Obviously don't do this on a production VS.

i turned debug on and i see only the below

tmm info tmm[7105]: 01260013:6: SSL Handshake failed for TCP from

no , this is the whole message from ltm log , its weird to me also that we don't see debug( i enable it from GUI)