Forum Discussion

_DDD's avatar
_DDD
Icon for Nimbostratus rankNimbostratus
Jan 04, 2022

Question regarding the SSL/TLS cipher and Certificate

Hi Folks,   I have two question regarding SSL/TLS cipher and Certificate. We used the same ssl profile with same cipher suite on two different F5 VSs, and we tested SSL/TLS by Qualys SSL Labs. But ...
BIG-IP
Certifiacte
LTM
security
ssltls
_DDD's avatar
_DDD
Icon for Nimbostratus rankNimbostratus
Jan 06, 2022

Hi Daniel,

 

Thanks for the answer. For the question 1, we use the ssl profile with cipher '!SSLv2:!EXPORT:!DHE+AES-GCM:!DHE+AES:!DHE+3DES:ECDHE+AES-GCM:ECDHE+AES:RSA+AES-GCM:RSA+AES:ECDHE+3DES:RSA+3DES:-MD5:-SSLv3:-RC4:@SPEED'. But we got the two different result. Here is the report which get the B grade

 

Same ssl profile on another VS, but it got A grade

 

We think it's weird, so we have opened the technical support case, and they ask us to capture the traffic on client side respectively. We'll check it with Support to see what happen between the ssl handshake. Thanks again for the answer.

 

Regards,

Ding

  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Jan 07, 2022

    Hi Ding,

     

    It's an odd behaviour. Please share the results with us.

     

    KR

    Daniel