Forum Discussion

amintej's avatar
amintej
Icon for Cirrus rankCirrus
Sep 12, 2017

Cipher configuration

Hello, I am trying to configure SSL client Profile version 12.1.2 including the next ciphers:

 

ECDHE_RSA_WITH_AES_128_CBC_SHA256

 

ECDHE_RSA_WITH_AES_256_CBC_SHA384

 

However I can find only:

 

ECDHE-RSA-AES128-CBC-SHA

 

ECDHE-RSA-AES256-CBC-SHA

 

neither SHA26 nor SHA384 in MAC. Any idea what I am doing wrong? I want to be sure cipher configuration is OK before configuring SSL offloading in LTM, because it is the current configuration for cipher suites.

 

Thank you,

 

application delivery
LTM
  • Kevin_K_51432's avatar
    Kevin_K_51432
    Historic F5 Account
    Sep 12, 2017

    Greetings, It looks to me like the CBC is implied. After looking the cipher up online and doing a quick connection test, CBC was listed in the cipher suite. From my test session capture:

                Session ID Length: 32
            Session ID: 32e83402862ca8e61ab05c0bee75506daf4782b2fa83fe56...
            Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
            Compression Method: null (0)

    Using:

    tmm --clientciphers DEFAULT | grep -i ecdh | grep -i sha384
34: 49192  ECDHE-RSA-AES256-SHA384          256  TLS1.2  Native  AES       SHA384  ECDHE_RSA

    You could test on your end just to be sure 😃

    Kevin