For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

amintej's avatar
amintej
Icon for Cirrus rankCirrus
Sep 12, 2017

Cipher configuration

Hello, I am trying to configure SSL client Profile version 12.1.2 including the next ciphers:

 

ECDHE_RSA_WITH_AES_128_CBC_SHA256

 

ECDHE_RSA_WITH_AES_256_CBC_SHA384

 

However I can find only:

 

ECDHE-RSA-AES128-CBC-SHA

 

ECDHE-RSA-AES256-CBC-SHA

 

neither SHA26 nor SHA384 in MAC. Any idea what I am doing wrong? I want to be sure cipher configuration is OK before configuring SSL offloading in LTM, because it is the current configuration for cipher suites.

 

Thank you,

 

application delivery
LTM

1 Reply

  • Kevin_K_51432's avatar
    Kevin_K_51432
    Historic F5 Account
    Sep 12, 2017

    Greetings, It looks to me like the CBC is implied. After looking the cipher up online and doing a quick connection test, CBC was listed in the cipher suite. From my test session capture:

                Session ID Length: 32
            Session ID: 32e83402862ca8e61ab05c0bee75506daf4782b2fa83fe56...
            Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
            Compression Method: null (0)

    Using:

    tmm --clientciphers DEFAULT | grep -i ecdh | grep -i sha384
34: 49192  ECDHE-RSA-AES256-SHA384          256  TLS1.2  Native  AES       SHA384  ECDHE_RSA

    You could test on your end just to be sure 😃

    Kevin