Forum Discussion

dipta_03_149731's avatar
dipta_03_149731
Icon for Nimbostratus rankNimbostratus
Dec 24, 2015

We have recently replaced one of the certifiactes with SHA-256 with SHA-2 as root.

We have recently replaced one of the certificates with SHA-256 with SHA-2 as root. It works fine on chrome and firefox but not on IE. Any option we need to take care of in F5 .

 

LTM
security

2 Replies

  • Prasath_Varatha's avatar
    Prasath_Varatha
    Icon for Nimbostratus rankNimbostratus
    Dec 24, 2015

    what is the version of IE? . I think IE above IE 6/7 will work fine and below do not support sha256.

     

  • dipta_03_149731's avatar
    dipta_03_149731
    Icon for Nimbostratus rankNimbostratus
    Dec 24, 2015

    Hi Prasath, Thanks for responding. Looks like the problem is not with cert , but with a sorry Irule where if pool members are not available then a sorry page should come up. It works fine on chrome and firefox but on IE browser it throws a http 404 error.

    Irule is :

    when HTTP_REQUEST { if { [active_members [LB::server pool]] <= 0 } { SSL::disable serverside if { [active_members www-origin.xxx.com-8083] > 0 } {

    log local0. "Current URI: [HTTP::uri]" 
          if { not (([HTTP::uri] ends_with "favicon.ico") or
                ([HTTP::uri] ends_with "owasiteid.js") or
               ([HTTP::uri] starts_with "/tmo/") or
                ([HTTP::uri] starts_with "/pics/") or
                ([HTTP::uri] starts_with "/lib/")) } {
`
    

 log local0. "Rewriting URI..."

`         HTTP::uri /index.html
      } else {
         HTTP::header replace Referer /
      }
`

 log local0. "Request: [HTTP::request]"


    `      pool www.xxx.com-8083
} else {
   set error_page "<html><head><title>Sorry!</title></head><body><H1>Sorry! Site is unavailable right now.  Please come back later.</H1></body></html>"
   HTTP::respond 404 content $error_page
}

    } }