Operational Defect Database

BugZero found this defect 1353 days ago.

F5 | 940733

Downgrading a FIPS-enabled BIG-IP system or running big3d_install results in a system halt

Last update date:

4/26/2024

Affected products:

BIG-IP

BIG-IP All

BIG-IP Install/Upgrade

Affected releases:

13.1.0

13.1.0.1

13.1.0.2

13.1.0.3

13.1.0.4

13.1.0.5

13.1.0.6

13.1.0.7

13.1.0.8

13.1.1

13.1.1.2

13.1.1.3

Fixed releases:

No fixed releases provided.

Description:

Bug ID 940733: Downgrading a FIPS-enabled BIG-IP system or running big3d_install results in a system halt ... Symptoms ... The system fails during the boot-up process, reports a libcrypto validation error, and the system halts. ... The console will show this error: Power-up self-test failures: OpenSSL: Integrity test failed for libcrypto.so This occurs after one of the following: -- Upgrading a FIPS-enabled BIG-IP system, booting to a volume running an earlier software version -- Running big3d_install from a BIG-IP GTM configuration to a BIG-IP LTM On a FIPS-licensed BIG-IP LTM configuration, when checking the big3d version you may see something similar to this: /shared/bin/big3d -V fips.c:204:f5_get_library_path: failed to ... Impact ... System boots to a halted state or big3d may continuously restart. ... Conditions ... Before booting to the volume with the earlier version, delete /shared/bin/big3d. ... DNS/GTM is not FIPS-certified. ... If the target software volume has already e...

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Resolved

Learn More

Search:

...