Bug ID 492780: Elliptic Curves Extension in ServerHello might cause failed SSL connection.

Last Modified: Oct 01, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3

Fixed In:
12.0.0, 11.6.0 HF4, 11.5.4 HF2

Opened: Nov 24, 2014
Severity: 4-Minor
Related AskF5 Article:
K37345003

Symptoms

Supported Elliptic Curves Extension is present in ServerHello, but some clients cannot process it.

Impact

Failed SSL connection.

Conditions

The issue occurs when Supported Elliptic Curves Extension is present in ServerHello when presented to a client that cannot process it.

Workaround

None.

Fix Information

Elliptic Curves Extension has been removed to support more types of clients.

Behavior Change