Forum Discussion
SSL profile. Ciphers
Of course. Just use the following string in the client SSL profile Ciphers box:
'!SSLv3:AES256-SHA'
It's worth noting here that most SSL stacks will arbitrarily remove portions of what are considered "default" ciphers if they're included in the cipher string. The general rule is:
-
If the key exchange is RSA, do not include RSA in the cipher string
-
If the block cipher mode is CBC, do not include CBC in the cipher string
That then leaves you with AES256-SHA, but that alone is possible in SSLv3 and all of the TLS versions, so we also want to remove SSLv3.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com