Forum Discussion

Gill_32697's avatar
Gill_32697
Icon for Nimbostratus rankNimbostratus
Mar 06, 2017

Invalid cipher DEFAULT:!EDH-RSA-DES-CBC3-SHA

getting invalid error when trying to add cipher DEFAULT:!EDH-RSA-DES-CBC3-SHA. Profile disallows SSLv2, SSLv2, TLS1.2 running OS 11.6.0 HF6...any idea what it wont take.

 

LTM
security

2 Replies

  • Stephane_Viau's avatar
    Stephane_Viau
    Icon for Nimbostratus rankNimbostratus
    Mar 06, 2017

    Try DEFAULT:!ECDHE-RSA-DES-CBC3-SHA

     

    You can SSH into your Big-IP and see the list of ciphers contained in the DEFAULT suite, based on your firmware version :

     

    tmm --clientciphers DEFAULT

     

  • Root44's avatar
    Root44
    Icon for Altostratus rankAltostratus
    Mar 06, 2017

    Can you try this?

     

    To accept - DEFAULT:EDH:RSA:DES:CBC3:SHA

     

    To reject - !SSLv2:!SSLv1:!TLS1_2

     

    Not sure I understood your question correctly but you can try above things.