ProxyPassSSLProfiles Internal Data Group Issue

I was able to get ProxyPass v10.9 to function properly on TMOS v11 with only the change mentioned in my above posting - using class match instead of findclass.

 

 

I also discovered that in v11.2 where it now supports and defaults to strict secure renegotiation in the server side SSL profile. My lab test was failing with the following message in the log file.

 

warning tmm1[7283]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted: ...

 

 

Setting the "Secure Renegotiation" setting in the server SSL profile to "Request" fixed this issue for me. I mention this ssl profile setting because obviously it is related to the ProxyPass iRule in the context above (i.e. ProxyPassSSLProfiles, etc.) and it is a change from v10.

 

 

Cheers

 

-Deon