sni
34 TopicsChrome V 124+ on MacOS - Virtual Server Access Issue
(editors note: this is not just MacOS - appears to be all Chrome browsers regardless of OS) It appears that the latest version of Google Chrome (version 124) on MacOS (ed. any OS) has broken the above code. With debugging turned on, we get this when a MacOS client accesses a virtual server with this rule: No SSL/TLS protocol detected ; connection is rejected (0x0000) Can anyone else confirm this? Any idea how to fix it?Stanislas_Piro2 ---- (Editors Note: This forum post was created via a comment on the OG Article written by Eric_Chen here: How to use SNI Routing with BIG-IP. That article contains 'the above code' and 'the rule' referenced here)Solved798Views2likes25CommentsTCL error: _cgc_pick_clientside
Hi, in an ASM-LTM (Perimeter) Setup I see frquently the following logs: ***err: tmm3[19962]: 01220001:3: TCL error: _cgc_pick_clientside - unknown cgc sni: f5-bei1.xxxx.xx (line 49) invoked from within "CGC::sni $tls_servername"*** Any idea what this TCL error causes? The clientssl is quite Basic: one certificate chain, no Server Name set. Thanks, Rolf1.1KViews1like4CommentsiApp template with multiple client_ssl profiles for SNI
Currently the http iApp template doesn't allow you to add multiple client SSL profiles to an application, which is what you need to do when using SNI on the virtual host. I've just been burnt by modifying an app that had strict updates disabled and the virtual server modified by hand to add the required SSL profiles. Rather than rebuild the service by hand, I'd like to modify the template to allow for multiple client SSL profiles. Has anyone done this for themselves ? I can't find any examples in the current iApps bundle, and the template language is a little daunting. Thanks in advance, Robin634Views1like6Comments