Forum Discussion
Erlend_123973
Aug 20, 2015Nimbostratus
SSL Profile cipher inheritance
Hi,
I have some problem understanding how inheritance of the cipher option is inherited using parent profiles.
Consider this example:
The SSL Server Profile "sslserver_parent" has cipher su...
Kevin_Stewart
Aug 21, 2015Employee
Updated values are rewritten. If you have RC4-MD5 in the parent and change the child to RC4-SHA, the resultant cipher string will only include RC4-SHA. You can test this with an ssldump on the server side VLAN.
ssldump -AdNn -i [server side vlan] port 443 and host [IP of backend server]
Since the BIG-IP is the client in this case, it'll send its complete supported cipher list in its ClientHello message.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects