Bug ID 527826: IP Intelligence update failed: Missing SSL certificate

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM, Install/Upgrade(all modules)

Known Affected Versions:
11.3.0, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3

Fixed In:
11.5.3 HF2

Opened: Jun 13, 2015

Severity: 2-Critical

Related Article: K31622556

Symptoms

IP Intelligence is failing the update due to missing certificate. You will see these errors in /var/log/ltm: err iprepd[5600]: 015c0004:3: Certificate verification error: 20 err iprepd[5600]: 015c0004:3: nSendReceiveSsl failed SSL handshake The certificate of vector.brightcloud.com was changed recently.

Impact

IP Intelligence database will not update.

Conditions

This is seen when attempting to update the IP Intelligence database.

Workaround

Add the new brightcloud certificate to the end of the chain.

Fix Information

This release contains an updated certificate chain.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips