F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Feb 13, 2017

clientssl profile with ECC certificate needs RSA Certificate

Hello guys,   Hope you could support me in the following matther.   I have already purchased an ECC wildcard certificate and I wanted to attach it to a virtual server in my BIG IP 4200 LTM box ...
application delivery
ecc
LTM
rsa
wildcard
nice2k_353973's avatar
nice2k_353973
Icon for Nimbostratus rankNimbostratus
Feb 25, 2018

Hi Everyone,

 

I am facing the same issue and adding ECDH_ECDSA to the ciphers does not seem to solve it.

 

We had already an RSA certificate so I just added the ECC key chain on the SSL profile, but SSLlabs always put the RSA certificate as 1 and only IE11 on win 7 and 8.1 is preferring ECC.

 

Here's our cipher config : ECDHE_ECDSA:DEFAULT:!DHE:!3DES:@SPEED:ECDHE

 

I tried without the :DEFAULT and also without the ending :ECDHE, but no success :(

 

Could you help me please ?

 

Thank you very much.

 

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Feb 26, 2018

Hello nice2k:

 

Try adding the following in the cipher field of the SSL profile:

 

ECDHE_ECDSA+TLSv1_2:!MD5:!EXPORT:!DES:!SSLv2:!SSLv3:!ADH:!RC4:!DHE:!EDH:SHA1:@SPEED

 

It worked for me... The SSL labs gave me an A grade...