Symptoms

When generic_alert is set to FALSE in client-ssl/server-ssl profile, and the system receives an unsupported certificate type Alert as an internal_error.

Impact

The system sends the Alert as an internal_error rather than Alert with unsupported_certificate.

Conditions

When generic_alert is set to FALSE in client-ssl/server-ssl profile, and the system receives an unsupported_certificate type.

Workaround

None.

Fix Information

The BIG-IP system now sends a fatal-level Alert message when it receives unsupported_certificate type. This is correct behavior.

Behavior Change