Forum Discussion

mvukusic's avatar
mvukusic
Icon for Altocumulus rankAltocumulus
Jul 01, 2019
Solved

iRule Editor can't connect to v14

Hi,

 

after upgrade to version 14 (14.1.0.5) I can't connect to Viprion via iRule Editor. It gives me "Invalid Connection Information..." error.

Has anybody experienced the same issue? Any ideas about possible solution?

 

Thanks,

Marko

  • Hi Marko,

     

    Are you connecting via the management IP/interface? If you are then I think the issue might be caused by v14 no longer allowing TLSv1 by default as seen below.

     

    Prior to version 14.0.0:

    # tmsh list sys httpd ssl-protocol

    sys httpd {

    ssl-protocol "all -SSLv2 -SSLv3"

    }

     

    Beginning in version 14.0.0:

    # tmsh list sys httpd ssl-protocol

    sys httpd {

    ssl-protocol "all -SSLv2 -SSLv3 -TLSv1"

    }

     

     

    To work around that you can modify the allowed protocols and remove the "-TLSv1" part of the string. Please note that this will allow TLSv1 again. It is up to you to determine if that is acceptable for your environment.

     

    # tmsh modify sys httpd ssl-protocol 'all -SSLv2 -SSLv3'

     

     

    Please also note that I have not personally tested the iRule editor on v14 so you will need to test this to see if it resolves your issue. Please let us know if it does as well.

2 Replies

  • Hi Marko,

     

    Are you connecting via the management IP/interface? If you are then I think the issue might be caused by v14 no longer allowing TLSv1 by default as seen below.

     

    Prior to version 14.0.0:

    # tmsh list sys httpd ssl-protocol

    sys httpd {

    ssl-protocol "all -SSLv2 -SSLv3"

    }

     

    Beginning in version 14.0.0:

    # tmsh list sys httpd ssl-protocol

    sys httpd {

    ssl-protocol "all -SSLv2 -SSLv3 -TLSv1"

    }

     

     

    To work around that you can modify the allowed protocols and remove the "-TLSv1" part of the string. Please note that this will allow TLSv1 again. It is up to you to determine if that is acceptable for your environment.

     

    # tmsh modify sys httpd ssl-protocol 'all -SSLv2 -SSLv3'

     

     

    Please also note that I have not personally tested the iRule editor on v14 so you will need to test this to see if it resolves your issue. Please let us know if it does as well.

  • Hi Nathan, that was it.

     

    Since our mgmt is not publicly exposed, I will allow TLSv1, it is not a big risk.

     

    Thank you,

    Marko