Forum Discussion
Mohanish_169493
Jul 21, 2015Nimbostratus
Need to configure specific Cipher "AES256-SHA256" in server SSL profile
Hi,
Please if someone can guide me as to how to configure specific cipher "AES256-SHA256" for server SSL profile.
The server side certificate is using "AES256-SHA256" so they want it to use this...
Kevin_Stewart
Jul 21, 2015Employee
I tested "AES256-SHA256" using openssl s_server against the end server.
I think technically you should be using openssl s_client to simulate the BIG-IP's role in communicating with the server. The client (BIG-IP) will send a list of ciphers that it can support to the server in its initial ClientHello message, and the server will pick a cipher from that list. That's generally how it works anyway. So if the client only presents one cipher, and the server supports that cipher, then that's what they will negotiate.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects