Forum Discussion

Businessuser's avatar
Businessuser
Icon for Nimbostratus rankNimbostratus
Nov 17, 2024

Troubleshooting SSL Connections

Is there any way to troubleshoot if problem is the connection is from:

client to load balancer OR

load balancer to webserver ?

 

There are logs to see but it is very generic (SSL handshake fail)

Is there any way I can learn more to troubleshoot?

application delivery
  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Nov 18, 2024

    Businessuser You can do a tcpdump for the client who's having an issue, save it, open it in wireshark and decrypt it using the SSL key. The following document should assist you.

    https://clouddocs.f5.com/training/community/adc/html/class4/module1/lab10.html

  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Nov 18, 2024

    You can disable the "Generic Alert" setting in the ssl profile to see more detailed error messages.

  • Aswin_mk's avatar
    Aswin_mk
    Icon for Cumulonimbus rankCumulonimbus
    Nov 18, 2024

    Hi 

     

    Use this command to collect the packet capture. you will get the client to LB and LB to webserver connection in the wireshark. Please analysis and you will able to find where it got failed

     

    tcpdump -nni 0.0:nnnp -s 0 host "vip ip" -w /var/log/sslissue.pcap

     

    BR
    Aswin