Forum Discussion
Problem ssl validation
Client SSL profile may be vulnerable to an Bleichenbacher attack against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack. Inorder to correct you need to disable !RSA algorithm from cipher list.
It will help you to increase the ssl rating. I would suggest to add below cipher in client ssl profile( try in non prod application)
DEFAULT:ECDHE:!RSA:!DHE:!3DES
Hope it will help you.
Referenc link https://support.f5.com/csp/article/K21905460
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com