For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Jul 06, 2018

re-encrypt with different cipher on server-ssl profile?

Is it possible to set a client ssl profile to cipher with diffie-helman and re-encrypt on the server ssl side to RSA? I presume this would be taxing on the device, but I need to understand the ins an...
application delivery
BIG-IP
LTM
Al_7443's avatar
Al_7443
Icon for Nimbostratus rankNimbostratus
Jul 06, 2018

Yes, it's supported. The LTM decrypts and re-encrypts traffic anyway so there is no huge difference in doing this. If you only have RSA in the suites accepted by your back-end server then the LTM will do it automatically. If not, create a server SSL profile with custom ciphers.