Forum Discussion
Enforce Server Cipher proposal in preferred order
Hi,
I want to change the server Cipher preferred order. I want EC preferred then RSA
like below
1, TLS13 AES256 GCM SHA384
2, TLS13 AES128 GCM SHA256
3, TLS13 CHACHA20 POLY1305 SHA256
4, TLS12 ECDHE ECDSA AES256 GCM SHA384
5, TLS12 ECDHE ECDSA AES128 GCM SHA256
6, TLS12 ECDHE ECDSA CHACHA20 POLY1305 SHA256
7+ all others RSA etc.
How do I achieve this?
Via iRule?
- yadgayanCirrus
I tried it. but how do i enforce below order ?
When the client sends the cipher proposal I want f5 respond EC preferred then RSA. How i do it?
1, TLS13 AES256 GCM SHA384
2, TLS13 AES128 GCM SHA256
3, TLS13 CHACHA20 POLY1305 SHA256
4, TLS12 ECDHE ECDSA AES256 GCM SHA384
5, TLS12 ECDHE ECDSA AES128 GCM SHA256
6, TLS12 ECDHE ECDSA CHACHA20 POLY1305 SHA2567+ all others RSA etc.
- yadgayanCirrus
do i need to define the cipher rule as I want ?
AES256-GCM-SHA384:AES128-GCM-SHA256:CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256
- yadgayanCirrus
Really appreciate your help. it's working as I want. Thanks lot.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com