For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Erlend_123973's avatar
Erlend_123973
Icon for Nimbostratus rankNimbostratus
Aug 20, 2015

SSL Profile cipher inheritance

Hi,   I have some problem understanding how inheritance of the cipher option is inherited using parent profiles.   Consider this example: The SSL Server Profile "sslserver_parent" has cipher su...
application delivery
LTM
server-side ssl profile
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 21, 2015

Updated values are rewritten. If you have RC4-MD5 in the parent and change the child to RC4-SHA, the resultant cipher string will only include RC4-SHA. You can test this with an ssldump on the server side VLAN.

ssldump -AdNn -i [server side vlan] port 443 and host [IP of backend server]

Since the BIG-IP is the client in this case, it'll send its complete supported cipher list in its ClientHello message.