Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Apr 28, 2014

Server SSL Profile ciphers

I'm using the following Ciphers string in a server SSL profile on my 11.4.1HF3 LTM: DEFAULT:-TLSv1_1:-TLSv1_2 The resulting ciphers list is this: Active:Changes Pending] ~ tmm --serve...
application delivery
LTM
management
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Apr 28, 2014

this is default https monitor.

[root@B5200-R78-S13:Active:Standalone] config  ssldump -Aed -nni 0.0 port 443
New TCP connection 1: 200.200.200.172(56861) <-> 200.200.200.101(443)
1 1  1398708564.6197 (0.0015)  C>SV3.1(128)  Handshake
      ClientHello
        Version 3.1
        random[32]=
          53 5e 99 54 af 65 1a 08 b9 5c 84 ef a5 03 93 9b
          19 14 27 d1 f7 b7 47 82 b4 2a 6b 54 98 af 6f 8e
        resume [32]=
          9d 19 e3 84 9d d1 26 7d e1 a3 7a 7b 55 49 3d 62
          fd 10 2c 2c 76 0d f2 72 b7 c2 c3 05 dc d7 7f c2
        cipher suites
        TLS_RSA_WITH_RC4_128_MD5
        TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
        TLS_RSA_EXPORT_WITH_RC4_40_MD5
        TLS_RSA_WITH_AES_256_CBC_SHA
        TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
        TLS_RSA_WITH_AES_128_CBC_SHA
        TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
        TLS_RSA_WITH_RC4_128_SHA
        TLS_RSA_WITH_DES_CBC_SHA
        TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
        TLS_RSA_WITH_3DES_EDE_CBC_SHA
        TLS_DHE_RSA_WITH_AES_256_CBC_SHA
        TLS_DHE_DSS_WITH_AES_256_CBC_SHA
        TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
        TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
        TLS_DHE_RSA_WITH_AES_128_CBC_SHA
        TLS_DHE_DSS_WITH_AES_128_CBC_SHA
        Unknown value 0x45
        Unknown value 0x44
        TLS_DHE_RSA_WITH_DES_CBC_SHA
        TLS_DHE_DSS_WITH_DES_CBC_SHA
        TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
        TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
        TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
        TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
        Unknown value 0xff
        compression methods
                unknown value
                  NULL

ps. sorry to spam answer. format is messed up when combining them into one post.