For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joseph_Johnson_'s avatar
Joseph_Johnson_
Icon for Nimbostratus rankNimbostratus
Oct 21, 2015

Implement LTM Local TLS Proxy Server Between Oracle and OITS

Hi,   We have an issue where an oracle application needs to talks to an external url and uses a SHA-1 certificate. In less than a month they will be changing to only accept SHA-2 certificates but...
application delivery
LTM
oracle
sha-1
sha-1 f5
sha-2
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 22, 2015

If I may add, and if I'm understanding your scenario, this should be completely possible. The BIG-IP is a full proxy, so everything layer 4 and above can be controlled independently on both sides of the proxy. What I think you're asking is if you can perform different types of encryption on either side, and that's absolutely possible. You can independently support separate SSL/TLS protocols, ciphers, key exchanges, encryption and hmac key strengths.