Forum Discussion

Zainal_Abidin_1's avatar
Zainal_Abidin_1
Icon for Nimbostratus rankNimbostratus
Jan 28, 2014

SSL Issue

Hi,

 

I recently add new SSL because old SSL is expired. After adding new SSL, when system idle about a minute and when user come back and click other url in system it auto logout from system. Before adding new SSL, we haven't facing this kind of issue. Sometimes click other url in system it's auto logout.

 

profile clientssl apps_clientssl { defaults from clientssl key "mydomain.com.key" cert "mydomain.com.crt" ciphers "NATIVE:!MD5:!EXPORT:!DES:@SPEED" passphrase "$M$5H$4WY3WKsHezARmX9wQIf2Mg==" handshake timeout 300 }

 

Please advice.

 

deployment

8 Replies

Sort By
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Jan 28, 2014

    Have you tried doing a tcpdump to capture the traffic?

     

    If you are being logged out, is it logged out by the application or by the f5? Can you provide more info about the setup - ie SSL offload, bridging, etc

     

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Feb 01, 2014

    i would check if there isnt anything else going on, a different certificate should cause this.

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Feb 05, 2014

    After adding new SSL, when system idle about a minute and when user come back and click other url in system it auto logout from system. Before adding new SSL, we haven't facing this kind of issue. Sometimes click other url in system it's auto logout.

     

    does it still happen if there is only one member in pool?

     

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      Feb 05, 2014
      they question was: does it happen with only one member in the pool? so please make sure there is only one member in the pool and try again.
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Feb 05, 2014

    Is the URL on the same virtual server? (eg /example/page.html)

     

    Do you have persistence set? It could be worth taking a tcpdump/ssldump to see exactly what is happening here. It may be that the first time you are going to pool member 1 and the second time you are going to pool member 2.