Forum Discussion

cxcal_18687's avatar
cxcal_18687
Icon for Nimbostratus rankNimbostratus
Feb 04, 2011

HELP: SSL 128 cipher failures

Running 10.1.0     VIP was originally setup to use server pool and a HTTP::redirect to https     That works fine with IE 8 and Firefox.     Discovered clients running IE 7 (with 128 ...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Feb 07, 2011
You can check which ciphers are available for a given cipher string using:

 

 

tmm --clientciphers 'DEFAULT:!ADH:!EXPORT40:!EXP:!LOW'

 

 

You can use ssldump to check what happens in a client and server SSL handshake negotiation:

 

 

sol10209: Overview of packet tracing with the ssldump utility

 

http://support.f5.com/kb/en-us/solutions/public/10000/200/sol10209.html

 

 

Aaron