Forum Discussion
BigIP 11.6 HF4 + SSL ciphers
I'm using 11.6 HF5 and this cipher gave me an A in SSLLABS but an obsolete cipher suite in Chrome :
DEFAULT:!DHE:@SPEED
Whereas this cipher gave me an A- in SSLLABS (better than A) and a modern cipher suite in Chrome :
DEFAULT:!SHA1:!DHE:@SPEED
Problem with this last configuration is that lots of devices are becoming uncompatible (IE8-10 + Win 7 for example) ...
Watch out, this is only applicable on 11.6 because "DEFAULT" is different from one version to another, cf. this doc : https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13171.html
I'm wondering if there is a way to please Chrome AND SSLLAB without excluding all the browsers that need SHA1 ?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com