Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Jun 01, 2015

ECC Ciphers in 11.4.1

I am having some trouble getting ECDHE ciphers to function. I am running 11.4.1 and have tried multiple cipher strings in the SSL profile, but I can't seem to get them to appear when I scan the VIP....
application delivery
cipher
client ssl profile
ecc
LTM
ssl
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jun 01, 2015

Mike,

 

What about if you run the following from the BIG-IP CLI?

 

tmm --clientciphers 'DEFAULT:!SSLv3:!RC4:@STRENGH' does this return possible ECDHE ciphers? My test rig is 11.5.1 and I do get ECDHE ciphers - but as you say they are included in 11.4.1.

 

Nothing else configured in the Client SSL Profile is there?

 

Hope this helps,

 

N