For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Jun 20, 2017

F5 ciphersuite syntax

Help me understand F5 ciphersuite syntax please: https://support.f5.com/csp/article/K13400   In the client-ssl ciphers syntax the article states that if you want to support TLS1.0 and SSL3.0 do th...
BIG-IP
security
TMOS
ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Jun 26, 2017

Despite what TMM showed in its output about I believe now that the syntax in the F5 article is CORRECT. I tested with the following commands:

 

openssl s_client -connect [IP ADDRESS]:443 -ssl3

 

openssl s_client -connect [IP ADDRESS]:443 -tls1

 

openssl s_client -connect [IP ADDRESS]:443 -tls1_1

 

openssl s_client -connect [IP ADDRESS]:443 -tls1_2

 

In the first 3 there was no negotiation but the last one accepted TLSv1.2. Note:I also noticed the syntax difference which might explain the difference in syntax for OpenSSL and TMM for TLSv1.2.