Forum Discussion
SSL cipher order
Hello guys, I am looking for some info on how to change the order of SSL ciphers that the LTM can negotiate. More specifically, I'd like to have strong ciphers first, and have one weaker cipher in the end, hoping this cipher will be negotiated only when the client doesn't not support any of the stronger ciphers. I see that there is the option to order the ciphers by Speed, but I suppose this is the opposite of what I am looking for. If I omit the @SPEED string, what is the cipher order? Can I perhaps order the cipher by specifying them consecutively one by one in the cipher string value field?
I searched through DevCentral and the AskF5 page, but could not find more info on this.
1 Reply
- ccb
Employee
Hi,
https://devcentral.f5.com/articles/ssl-profiles-part-4-cipher-suites.U5rIoPmSy1k
It will give you an example of strength before speed using the openssl syntax. Hope that helps.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
