Forum Discussion
Dave_Marshaloni
Nimbostratus
Mar 22, 2011Redirect User to different host based on source address
Hello All,
I'm new to iRules so this question may be stupid or not able to be accomplished.
We have a website (i.e. www.server.com) that we have. We want our internal users to be ...
nitass_89166
Noctilucent
Sep 04, 2013can you try ssldump to see ssl handshake?
sol10209: Overview of packet tracing with the ssldump utility
http://support.f5.com/kb/en-us/solutions/public/10000/200/sol10209.html
Kevin_Stewart
Employee
Sep 05, 2013I agree with Nitass. If SSL decryption/encryption is failing for the Java app, then you need to dig into the client OR server side SSL (it could be either or both). Just to be clear though, when you say it works with SSL session persistence, are you also implying that no decryption/encryption is happening (no client or server SSL profiles)?
- Erich_Macbeth_2Aug 17, 2017
Nimbostratus
I was able to figure out how to modify the cipher list from the CLI using the following commands:
tmsh modify sys application service iapp_name.app/iapp_name strict-updates disabled tmsh modify ltm profile client-ssl /Common/iapp_name.app/ssl_profile_name ciphers 'cipher_list' tmsh modify sys application service iapp_name.app/iapp_name strict-updates enabled
I have not been able to figure out how to get it to default to the parent SSL profile.