Bug ID 755378: HTTPS connection error from Chrome when BADOS TLS signatures configured

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1

Fixed In:
15.0.0, 14.1.0.2

Opened: Jan 13, 2019

Severity: 2-Critical

Symptoms

HTTPS connection error occurs. The system posts the following ltm.log warnings: -- warning tmm1[25112]: 01260009:4: Connection error: ssl_basic_crypto_cb:694: Decryption error (20) -- warning tmm1[25112]: 01260009:4: Connection error: hud_ssl_handler:1941: codec alert (20)

Impact

HTTPS virtual server is not responsive.

Conditions

-- BADOS TLS signatures configured. -- DoS profile is attached to a virtual server. -- Using Google Chrome browser.

Workaround

Turn off TLS signatures flag.

Fix Information

HTTPS connection error no longer occurs when connecting from Chrome to virtual server with TLS signature BADOS protection.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips