For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DevBabu_124276's avatar
DevBabu_124276
Icon for Nimbostratus rankNimbostratus
Aug 17, 2015

Does bigd support TLS1.2. Monitor is failing when TLS1.2 is only enabled in server

The default https monitor is failing when TLS1.2 is only enabled in server. Does bigd support TLS1.2. I am using 11.4.1 HF6. When I use the following CIPHERS in https monitor it even does not start...
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Oct 11, 2016

Also, in the same solution:

 

Note: You cannot modify the TLS/SSL protocol version. The HTTPS monitor will choose the highest level TLS/SSL protocol.

 

bigd does not interpret the protocol version from the cipher list, but does implement the ciphers. Solution for your case is either upgrade as suggested or external monitor.

 

About external monitor, I could only find this one that is for HTTP, but you can change the curl command to HTTPS: https://devcentral.f5.com/codeshare?sid=395

 

I will have to write one HTTPS as I need, so I will share the link after (probably this week).