Bug ID 515286: SSL record padding verification might incorrectly fail

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP MA-VE(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0

Opened: Mar 30, 2015

Severity: 3-Major

Related Article: K30954062

Symptoms

If the padding value on an SSL record is greater than 127 bytes, the verification might fail.

Impact

A connection will be severed with a `bad record mac' alert

Conditions

SSL record padding greater than 127 bytes.

Workaround

None

Fix Information

Now, when the padding value on an SSL record is greater than 127 bytes, the verification completes as expected.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips