Forum Discussion
AltocumulusCipher string for "fussy" server
I am trying to connect to an https server, but cannot get it to accept the ciphers offered in the clientHello on the BigIP.
Would someone please help me with the cipher string to put in my serverssl profile? The bigip is running v11.1
According to openssl, the server supports the following ciphers:
Supported Cipher(s):
Accepted TLSv1 128 bits DHE-DSS-AES128-SHA
Accepted SSLv3 128 bits DHE-DSS-AES128-SHA
Accepted SSLv3 168 bits EDH-DSS-DES-CBC3-SHA
Accepted SSLv3 56 bits EDH-DSS-DES-CBC-SHA
Accepted SSLv3 40 bits EXP-EDH-DSS-DES-CBC-SHA
Accepted TLSv1 168 bits EDH-DSS-DES-CBC3-SHA
Accepted TLSv1 56 bits EDH-DSS-DES-CBC-SHA
Accepted TLSv1 40 bits EXP-EDH-DSS-DES-CBC-SHA
Prefered Server Cipher(s):
SSLv3 128 bits DHE-DSS-AES128-SHA
TLSv1 128 bits DHE-DSS-AES128-SHA
2 Replies
- nitass
Employee
i do not see DSS in ciphers supported list.
sol13163: SSL ciphers supported by BIG-IP SSL profiles (11.x)
http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html 
uniBrilliant. Thanks nitass. We hopefully just need them to put certificates with RSA keys on the server.
