Forum Discussion

Icon for Cirrus rank

Cirrus

Mar 22, 2023

Enable TLS 1.3 and Disable DH group

Hello Experts,

I have a task need to enable TLS 1.3 and disable DH group.

To enable TLS 1.3, I can use cipher group to do by this link https://my.f5.com/manage/s/article/K10251520

To disable DH, I can use DEFAULT:!DH

But how to do this together?

application delivery

Paulius
Mar 22, 2023
SolarJeans This link should assist you in creating the appropriate custom cipher group.

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-ltm-configuring-custom-cipher-string-for-ssl-negotiation/configuring-a-custom-cipher-string-for-ssl-negotiation.html

Paulius
MVP
Mar 22, 2023
SolarJeans This link should assist you in creating the appropriate custom cipher group.

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-ltm-configuring-custom-cipher-string-for-ssl-negotiation/configuring-a-custom-cipher-string-for-ssl-negotiation.html
- SolarJeans
  Cirrus
  Mar 31, 2023
  Hello,
  Yes, I try to create custom cipher rule and custom cipher group and issue fixed. Thanks a lot.
Samir
MVP
Mar 22, 2023
You can try something like this to enable tls1.3 and disable DHE

DEFAULT:TLSV1_3:!DHE