Forum Discussion

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 27, 2014

Management Interface SSL Ciphers

Hey all, So, I'm trying to restrict the SSL ciphers used with the management interface (including iControl). To test this, I've used the [tmsh] modify sys httpd ssl-ciphersuite ... command with...
configuration utility
devops
iControl
ssl
TMOS
TMSH
Kevin_K_51432's avatar
Kevin_K_51432
Historic F5 Account
Oct 27, 2014

Greetings, Here's the default apache cipher list:

DEFAULT:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP

Can you simply append !SSLv3 to the list to disable SSLv3?

tmsh modify sys httpd ssl-ciphersuite 'DEFAULT:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!SSLv3'
tmsh save sys config
bigstart restart httpd

Looks to have been added to /etc/httpd/conf.d/ssl.conf and SSLv3 no longer negotiates.

SSLCipherSuite DEFAULT:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!SSLv3

Kevin