Forum Discussion
Vivek_Datta_263
Nimbostratus
NimbostratusCipher string to block RSA but not ECDHE+RSA ciphers
Hi,
A novice here.
As per recent OpenSSL report, RSA ciphers are being termed as weak.
E.g.: TLS_RSA_WITH_AES_256_GCM_SHA384
However ECDHE with RSA still stay strong.
E.g.: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Is there a way to update my cipher string which would block RSA ciphers but not ECDHE RSA ones?
Thanks.
Vivek_Datta_263Thanks!
You can add !RSA to your cipher suit. It will block RSA key exchange only and will not affect any ECDHE_RSA cipher. You can check resulting ciphers running: tmm --clientciphers 'your_cipher_string'
https://support.f5.com/csp/article/K15194
