How Proxy SSL works on BIG-IP

1. Lab Scenario Lab test results: Client completes 3-way handshake with BIG-IP and BIG-IP immediately opens and completes 3-way handshake with back-end server Upon receiving Client Hell...
Published Sep 04, 2019
Version 1.0
BIG-IP
security
ssl
tls
Saravanan_M_K's avatar
Saravanan_M_K
Icon for Employee rankEmployee
Sep 05, 2019

 Just to be more accurate, the below sentence:

 

Disabling DHE cipher on back-end server did the trick to fix the above error.

 

can be modified to:

 

Disabling non-RSA key exchange on back-end server did the trick to fix the above error. (since proxy SSL only support RSA key exchange)

 

(non-RSA: DH, DHE, ECDH, ECDHE, PSK, etc.)