Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5
Fixed In:
16.1.0, 15.1.5.1, 14.1.4.6
Opened: Sep 17, 2020 Severity: 2-Critical
A TLS 1.3 handshake failure occurs when using openssl's AES-GCM cipher in FIPS mode.
Handshake failure for TLS 1.3
FIPS mode and attempting TLS 1.3 with cipher AES-GCM
Disable FIPS mode, or alternately use non AES-GCM cipher for TLS 1.3.
TLS 1.3 AES-GCM in FIPS mode now works correctly.