Forum Discussion

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Feb 14, 2017

clientssl profile with ECC certificate needs RSA Certificate

Hello guys,   Hope you could support me in the following matther.   I have already purchased an ECC wildcard certificate and I wanted to attach it to a virtual server in my BIG IP 4200 LTM box ...
application delivery
ecc
LTM
rsa
wildcard
Kevin_K_51432's avatar
Kevin_K_51432
Historic F5 Account

Greetings, It looks like at least one RSA cert & key is required. You could try preferring ECC, instead of only using (as above) with:

 

ECDH_ECDSA:DEFAULT

 

I would assume BIG-IP bases which cert / key to use based on the client's preference in the initial handshake.

 

Kevin

 

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Mar 10, 2017

Hi Kevin,

 

I really appreciate your help.

 

How could I combine the ECDH_ECDSA:DEFAULT cipher with a customized one I have which is NATIVE:!MD5:!EXPORT:!DES:!DHE:!EDH:@SPEED ?

 

Thanks