Forum Discussion

Cirrus

Mar 07, 2017

SSL Labs A rating - 2017 Jan update

SSL Labs will change their rating. It will give penalties if still using 3DES with TLS 1.1 and newer protocol. How could I configure Bigip to support this ? But still support 3DES with TLS 1.0. ...

MVP

Mar 07, 2017

Hi Magnus,

you may check out my post...

https://devcentral.f5.com/questions/howto-getting-an-awesome-qualys-ssl-labs-rating-feb-2017-update-51489

The post contains a chipher string that supports 3DES for TLS1.0, TLS1.1 and TLS1.2 but achives an A or even A+ rating by placing DES to the very buttom of the list.

Note: Please review the comments of my post. They are containing additional information to secure DH and 3DES usage.

Cheers, Kai

carlitos05
Nimbostratus
Aug 19, 2019
Kai, your post does not exist any more?
- Lidev
  Nacreous
  Aug 19, 2019
  Hi Carlitos,
  
  The link is valid here :https://devcentral.f5.com/s/feed/0D51T00006aEjM9SAK
  
  if you are running v13.x or 14.x of BIG-IP, you can now configure a custom cipher group using the Configuration utility.
  
  Regards