Forum Discussion

Doran_Lum's avatar
Doran_Lum
Icon for Nimbostratus rankNimbostratus
Apr 14, 2020

Checking on ciphers for ssl profile

I try to run the following command tmm -serverciphers but i don't seem to get any return results. In the ssl profile the cipher is set as "TLSv1_2:!3DES:!DES:!RC4"

 

[admin@Node-01:Active:Changes Pending] ~ # tmm --serverciphers certificate_ECDHE_NoTLSv1_No3DES_clientssl

      ID SUITE                           BITS PROT   CIPHER             MAC    KEYX

[admin@Node-01:Active:Changes Pending] ~ #

 

application delivery
BIG-IP
security
  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    Apr 14, 2020

    you need to be very specific while displaying client or server ciphers.

    Example: For default you use this

    tmm --clientciphers DEFAULT

    tmm --clientciphers <Client_Ciphers>
tmm --clientciphers 'DEFAULT:!TLSv1'
 
tmm --serverciphers <cipher suite>
tmm --serverciphers 'ECDHE-RSA-AES256-CBC-SHA'

    https://support.f5.com/csp/article/K13163

    Hope it will help you