Bug ID 492780: Elliptic Curves Extension in ServerHello might cause failed SSL connection.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF4, 11.5.4 HF2

Opened: Nov 24, 2014

Severity: 4-Minor

Related Article: K37345003

Symptoms

Supported Elliptic Curves Extension is present in ServerHello, but some clients cannot process it.

Impact

Failed SSL connection.

Conditions

The issue occurs when Supported Elliptic Curves Extension is present in ServerHello when presented to a client that cannot process it.

Workaround

None.

Fix Information

Elliptic Curves Extension has been removed to support more types of clients.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips