Bug ID 445950: SSL can crash under certain circumstances using iRule on CLIENTSSL_HANDSHAKE

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.3.0, 11.4.0

Fixed In:
11.6.0

Opened: Jan 24, 2014

Severity: 2-Critical

Symptoms

When using COMPAT ciphers and responding to CLIENTSSL_HANDSHAKE the tmm might crash.

Impact

Traffic disrupted while tmm restarts.

Conditions

The negotiated cipher is COMPAT and and iRule issues `SSL::respond' in the CLIENTSSL_HANDSHAKE event.

Workaround

None.

Fix Information

When using COMPAT ciphers and responding to CLIENTSSL_HANDSHAKE the tmm no longer crashes.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips