Forum Discussion

squip_86995's avatar
squip_86995
Icon for Nimbostratus rankNimbostratus
Apr 07, 2014

OpenSSL and Heart Bleed Vuln

Get the latest updates on how F5 mitigates Heartbleed     Hi Team,   I know this question is eventually going to be asked - I may as well do it.   With the news today about the Heartblee...
https
management
security
ssl
tls
TMOS
BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Apr 08, 2014

tmm --clientciphers NATIVE

will give you the list of the NATIVE ssl ciphers on your bigip Version. For all ciphers that appear on that list, you're not using openssl.

Also, the only BigIP version that is using a vulerable openssl in the wild is v11.5.0.

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 08, 2014
    I'm not convinced that's the case when using a mixed cipher string. OpenSSL supports the native ciphers too. I'll try and do some testing and see what I find. You're correct that only v11.5 is vulnerable. As noted earlier, the management GUI is also vulnerable but again only on v11.5.