sebbenw_230133
Feb 23, 2017Nimbostratus
trouble with ocsp -stapling
Hi, we are having a big issue with our f5 ltm. The problem we are having is that some clients suddenly gets rejects and SSL handshake failure from us. the problem can last for just some minutes to several hours. we think the problem has something to do with ocsp-stapling because when we turn the profile of it starts working for the client who had problem again and then we can turn the ocsp profile on again. the crazy thing is that it isn't everybody who gets these problem even though they are using the same CA.
we are running on version 12 of the f5 big-ip ltm.
would be very greatful for any suggestion on why this is happening
regards
Sebastian