Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP TMOS
Fixed In:
17.0.0, 16.1.2.2
Opened: Nov 25, 2021 Severity: 3-Major
Dns Over HTTPS (DOH) is allowed to work without a clientssl profile on clientside. Setting it to none disables the DNS resolution via the HTTPS protocol.
An error occurs: GUI: 01020036:3: The requested profile (/Common/NO_SELECTION) was not found. TMSH: 01070734:3: Configuration error: In Virtual Server (/Common/mydohproxylistener) http2 specified activation mode requires a client ssl profile
- Selecting "None" in Client SSL Profile and Server SSL Profile in DOH Server Listener and DOH Proxy Listener from GUI
None
None