Forum Discussion

lostmyspaceship's avatar
lostmyspaceship
Icon for Nimbostratus rankNimbostratus
Jun 13, 2014

SSL cipher order

Hello guys, I am looking for some info on how to change the order of SSL ciphers that the LTM can negotiate. More specifically, I'd like to have strong ciphers first, and have one weaker cipher in the end, hoping this cipher will be negotiated only when the client doesn't not support any of the stronger ciphers. I see that there is the option to order the ciphers by Speed, but I suppose this is the opposite of what I am looking for. If I omit the @SPEED string, what is the cipher order? Can I perhaps order the cipher by specifying them consecutively one by one in the cipher string value field?

 

I searched through DevCentral and the AskF5 page, but could not find more info on this.

 

1 Reply

  • Hi,

     

    https://devcentral.f5.com/articles/ssl-profiles-part-4-cipher-suites.U5rIoPmSy1k

     

    It will give you an example of strength before speed using the openssl syntax. Hope that helps.