NimbostratusHi all,
I've changed the ciphers of Configuration Utility. refer : https://support.f5.com/csp/article/K13405 And now, my customer wants to restore default cipher suite.
Where can I find default cipher suite? Is it same with SSL profile's DEFULAT cipher?
CumulonimbusWhich version of BIG-IP are your running?
Nimbostratus11.6.0 11.4.1 10.2.4
CirrusDoesn't Configuration Utility and other components like iControl are using OpenSSL instead of TMM builtin stacks?. If so you can use openssl command to get the ciphers, referred by cipherstrings:
openssl ciphers DEFAULT
or
openssl ciphers -v DEFAULT
Otherwise you can ask the tmm for the builtin ciphers:
tmm --clientciphers DEFAULT
Hope that helps.
Greets, svs
CumulonimbusThe Configuration Utility is hosted by the Apache httpd server, which uses openssl. So the above openssl commands are the right means to find the information you need.
CumulonimbusI think we may have misunderstood your question. You were actually asking for the list of ciphersuites defined for the Configuration Utility as it comes with a specific BIG-IP release, not the list of ciphersuites as represented by the keyword "DEFAULT".
Please see the following:
K13405: Restricting Configuration utility access to clients using high-encryption SSL ciphers (11.x)
and follow the links in the article for information about other releases.