Forum Discussion

SK391_339749's avatar
SK391_339749
Icon for Nimbostratus rankNimbostratus
Feb 27, 2018

Soft Disable Cipher but enable the following .....

I'm looking to soft disable RSA as the key exchange but enable the following cipher string,

 

TLS_RSA_WITH_AES_128_CBC_SHA256

 

I've tried -RSA:AES128-CBC-SHA256 and some various similar commands but the F5 doesnt seem to accept it.

 

Can anyone guide me please?

 

I've read the following but still cant get it to work using there examples https://devcentral.f5.com/articles/cipher-suite-practices-and-pitfalls-25564

 

application delivery
LTM
security

2 Replies

Sort By
  • Anesh's avatar
    Anesh
    Icon for Cirrostratus rankCirrostratus
    Feb 27, 2018

    If you want to remove cipher suites using RSA key Exchange, try below:

    DEFAULT:!RSA
  • Anesh's avatar
    Anesh
    Icon for Cirrostratus rankCirrostratus
    Feb 28, 2018

    Can you provide the output of the below commands

    tmm --clientciphers '-RSA:AES128-SHA256'

    and

    tmm --clientciphers '-RSA:RSA+AES+SHA'