Aviv
Jul 12, 2015Cirrus
SSL Ciphers
Hi!
i have big-ip 11.5.1
according to ssllabs.com test i need to config only this ciphers on ssl profile :
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 1...
Ah, do you have any hotfixes applied to 11.5.1?
A fix has been applied to 11.5.1 HF6 and 11.6.0, so you'll need to get there soon. In the meantime, per:
https://devcentral.f5.com/articles/cve-2014-3566-poodle-vs-cve-2014-8730-tls-poodle
and
https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html
the workaround cipher string is:
!SSLv3:AES-GCM:RC4-SHA