Forum Discussion

Nimbostratus

Nov 30, 2016

How to disable TLSv1.1

HI All, in SSL client ciphers TLSv1 is disabling TLSv1.0 but not TLSv1.1 , Can some one please let me know what should i add to disable TLSv1.1 ?

Nacreous

You need to use an underscore instead of a dot, for example

DEFAULT:!TLSv1_1

cipher string will work.

You can verify that

:!TLSv1.1

doesn't work by executing the following:

tmm --clientciphers 'DEFAULT:!TLSv1.1'

(BigIP Bash shell).

Employee

Nov 30, 2016

Good catch. ;)