Description

Health check client certificate updates (running /c/slb/advhc/cert) do not affect SIP‑SSL real server health checks
that were already active before the change.

Scenario:

1. The SIP server requests a client certificate during the TLS handshake.
2. On the Alteon device:
   • Initial setup: A real server/group/virtual service combination is configured and tested using a SIP SSL health check.
   • A new client certificate and key are imported using /c/slb/ssl/cert, and the client certificate is configured running /c/slb/advhc/cert; apply.

Despite this, the new client certificate is not used in the subsequent TLS handshakes for the above real server/group/virtual service combination

Affected Versions

32.4.0.0 and later

Bug ID

AL-154573

Solution

Upgrade to a version that fixes the issue.

Workaround

To refresh the SSL context for the affected real server, perform the following actions on that real server:

1. Disable and Apply
2. Enable and Apply
3. Allow time for the server to come up again based on the configured health check interval and "number of successful attempts to declare server up" settings.

1. Run /c/slb off and Apply
2. Run /c/slb on and Apply

Note: Take into account the potential service impact when planning the appropriate maintenance window

ETA for fix