Forum Discussion

Nimbostratus

Feb 24, 2015

Redirect with poodle exploit prevention iRule

I'm trying to add redirection to an iRule that uses a binary scan to ascertain if the client is attempting to use ssl2/3. Currently, there is only a 'reject' or 'release' available for actions. Would it be possible to perform a redirect? Thanks!

2 Replies

nitass
Employee
Feb 24, 2015
is SSL::cipher version usable?

SSL::cipher

https://devcentral.f5.com/wiki/iRules.SSL__cipher.ashx

Redirect On Weak Encryption

https://devcentral.f5.com/wiki/iRules.RedirectOnWeakEncryption.ashx
jeffnotcarl_142
Nimbostratus
Feb 24, 2015
I gave it a shot; however, when sslv2/3 are disabled (with TLS enabled), it throws an error stating that ssl is disabled and it cannot connect. When they are enabled (along with TLS enabled), it appears to hang.

Thanks very much for your help!!