For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mahir's avatar
mahir
Icon for Altostratus rankAltostratus
Nov 12, 2020

disable disable TLS extended master secret extensions on the SSL

Hi 

 

I would like to disable the option TLS extended master secret extensions over profile SSL at my Bigip 14.1.28.

I am unable to execute the command recommend by the link below :

 

https://api-u.f5.com/support/kb-articles/K66202244?pdf

modify /sys db tmm.ssl.extmsenabled false

 

 

BIG-IP
security
TMSH

1 Reply

  • Giorgi_Gujabidz's avatar
    Giorgi_Gujabidz
    Icon for Cirrus rankCirrus
    Nov 13, 2020

    Hi, I just want to double check, did you run this command in Traffic Management Shell - tmsh? As if you tried to run this directly in Linux Shell (bash), it won't work. You have to either run the entire command from bash:

     

    tmsh modify /sys db tmm.ssl.extmsenabled false

     

    Or you have first type tmsh, to enter the TMM shell and then type your command:

     

    modify /sys db tmm.ssl.extmsenabled false

     

    Here is a link, with more details: https://support.f5.com/csp/article/K66202244