Forum Discussion
NimbostratusFor version 11.6.1, sslv3 not in default SSL profile
For version 11.6.1, sslv3 not in default SSL profiles. Is there any bug id related to the same. while we upgrade the f5 ltm to version 11.6.1 we found sslv3 is not disabled by default, we explicitly disabled the sslv3. Please suggest.
4 Replies
- Kevin_Stewart
Employee
Please see this: SOL15022: SSLv3 protocol is disabled in the DEFAULT SSL ciphers
And for more information about what's in the DEFAULT stack across versions: SOL13156: SSL ciphers used in the default SSL profiles (11.x - 12.x)
IainThomson85_1Cumulonimbus
Your post is a little contradictory - it suggests that you expected that SSLv3 to be disabled in 11.6.1 in the DEFAULT Cipher string (As would I...) However when you upgraded you found it was enabled?
Have you verified this by viewing the SSL Cipher String DEFAULT post upgrade?
purna_256577SSLv3 should disabled by default as per SOL15022, But it is not disabled in our case. We manually disabled the SSLv3 in version 11.6.1. My query is this is a expected behavior or any bug related to it.
- Kevin_Stewart
Something might have carried over from the upgrade. Can you look at the DEFAULT stack and see what it says?
tmm --clientciphers DEFAULT
