Forum Discussion

ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Jun 20, 2017

F5 ciphersuite syntax

Help me understand F5 ciphersuite syntax please: https://support.f5.com/csp/article/K13400   In the client-ssl ciphers syntax the article states that if you want to support TLS1.0 and SSL3.0 do th...
BIG-IP
security
TMOS
ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Jun 26, 2017

Despite what TMM showed in its output about I believe now that the syntax in the F5 article is CORRECT. I tested with the following commands:

 

openssl s_client -connect [IP ADDRESS]:443 -ssl3

 

openssl s_client -connect [IP ADDRESS]:443 -tls1

 

openssl s_client -connect [IP ADDRESS]:443 -tls1_1

 

openssl s_client -connect [IP ADDRESS]:443 -tls1_2

 

In the first 3 there was no negotiation but the last one accepted TLSv1.2. Note:I also noticed the syntax difference which might explain the difference in syntax for OpenSSL and TMM for TLSv1.2.