Bug ID 450055: SSL termination with responseadapt causes early client shutdown

Last Modified: Oct 16, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.2 HF1, 11.4.1

Fixed In:
11.6.0, 11.5.1 HF5, 11.4.1 HF9

Opened: Feb 24, 2014

Severity: 4-Minor

Symptoms

When the HTTP terminates its connection, BIG-IP receives an SSL encryption alert along with a FIN from the server (close SSL from the server), and then BIG-IP sends a FIN to the clientside before the RSPMOD transaction with the ICAP server has completed. HTTP client does not receive the HTTP repsonse (whether modified or not).

Impact

Response adaptation with with SSL might not return entire response to client after server closes SSL session.

Conditions

Virtual Server (VS) with responseadapt and SSL.

Workaround

None.

Fix Information

When the HTTP terminates its connection, BIG-IP receives an SSL encryption alert along with a FIN from the server (close SSL from the server), BIG-IP completes the HTTP response before closing the client connection.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips