Bug ID 609515: REST Framework update fails for 11.5.x devices not allowing TLSv1

Last Modified: Nov 22, 2021

Bug Tracker

Affected Product:  See more info
BIG-IQ Platform(all modules)

Fixed In:
5.1.0

Opened: Aug 08, 2016
Severity: 3-Major

Symptoms

When trying to add a 11.5.x device from BIG-IQ v5.0.0, the operation fails with the error "could not upgrade REST framework" if the BIG-IP does not allow TLSv1 in its httpd config.

Impact

BIG-IQ fails to discover the device from the UI.

Conditions

SSLv3 and TLSv1 have been disabled on BIG-IP by use of the tmsh command modify sys httpd ssl-ciphersuite "DEFAULT:!SSLv3:!TLSv1"

Workaround

The framework can be manually upgraded using /usr/lib/dco/packages/upd-adc

Fix Information

The list of ssl-ciphercuites used for updating the 11.5.x framework has been expanded to include newer TLS protocols.

Behavior Change