Forum Discussion

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Feb 14, 2017

clientssl profile with ECC certificate needs RSA Certificate

Hello guys,   Hope you could support me in the following matther.   I have already purchased an ECC wildcard certificate and I wanted to attach it to a virtual server in my BIG IP 4200 LTM box ...
application delivery
ecc
LTM
rsa
wildcard
nice2k_353973's avatar
nice2k_353973
Icon for Nimbostratus rankNimbostratus
Feb 26, 2018

Hi Everyone,

 

I am facing the same issue and adding ECDH_ECDSA to the ciphers does not seem to solve it.

 

We had already an RSA certificate so I just added the ECC key chain on the SSL profile, but SSLlabs always put the RSA certificate as 1 and only IE11 on win 7 and 8.1 is preferring ECC.

 

Here's our cipher config : ECDHE_ECDSA:DEFAULT:!DHE:!3DES:@SPEED:ECDHE

 

I tried without the :DEFAULT and also without the ending :ECDHE, but no success :(

 

Could you help me please ?

 

Thank you very much.

 

  • jmanya_44531's avatar
    jmanya_44531
    Icon for Nimbostratus rankNimbostratus
    Feb 26, 2018

    Hello nice2k:

     

    Try adding the following in the cipher field of the SSL profile:

     

    ECDHE_ECDSA+TLSv1_2:!MD5:!EXPORT:!DES:!SSLv2:!SSLv3:!ADH:!RC4:!DHE:!EDH:SHA1:@SPEED

     

    It worked for me... The SSL labs gave me an A grade...