Bug ID 581660: After restarting pkcs11d, Thales connection may fail with 'cannot locate key'.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: Mar 18, 2016

Severity: 2-Critical

Symptoms

netHSM connection may fail with a message 'cannot locate key'. This only affects Thales users. SafeNet users are not affected by this issue.

Impact

SSL handshake failure with a message similar to the following: SSL Handshake failed for TCP 10.10.0.1:59513 -> 10.10.1.150:20001.

Conditions

This may happen after restarting pkcs11d without starting tmm immediately after.

Workaround

For Thales, always restart tmm after restarting pkcs11d. To do so, run the following commands: bigstart restart pkcs11d bigstart restart tmm

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips