Bug ID 539820: SSL profiles removed from virtual server on upgrade

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP All, Install/Upgrade(all modules)

Known Affected Versions:
11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0

Opened: Aug 13, 2015

Severity: 3-Major

Symptoms

When loading the ucs, a warning message is displayed indicating that some of the SSL profiles are being removed from a virtual server's configuration.

Impact

A virtual server might lose some of its SSL profile configuration.

Conditions

This issue happens when upgrading from a relatively older version (11.1.0 through 11.2.1) to a relatively newer (11.3.0 through 12.0.0).

Workaround

Re-add the SSL profiles back to the virtual server's configuration.

Fix Information

Without the fix, in order to prevent validation failure due to server name checks for multiple ssl profiles, only one of the ssl profiles of a virtual server will be preserved over upgrade from (11.1.0 through 11.2.1). With the fix, they won't be removed during upgrade if they don't violate those server name policies. In other words, they will still be removed if they will cause validation failure in the new version.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips