OPERATIONAL DEFECT DATABASE
...
...
When using ClientSSL, client certificate authentication may fail, if client certificate authentication is set to 'request' or 'require'.
SSL/TLS connections fail to establish for some clients on virtual servers that request or require client certificates.
This occurs when the following conditions are met: -- A ClientSSL profile exists on the virtual server. -- The ClientSSL profile is configured with client certificate authentication set to 'request' or 'require.' -- The client responds with a certificate signed by one of the following affected signature algorithms: SHA256-RSA(0x0401), SHA384-RSA(0x0501), or SHA512-RSA(0x0601).
None
Unsupported SHA algorithms have been removed, so SSL/TLS client certificate verification completes successfully.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
