Andrei_Popiste1
Nimbostratus
Jan 17, 2011SSL serverside cipher mismatch
In a hardware-based 10.2(+HF2) LTM installation, LTM cannot negotiate cipher with an IIS6 server (ssldump reports a TCP close sequence after client hello).
Default https monitor reports TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA cipher negotiated with IIS; openssl s_client negotiate also the same cipher.
The symptom persists even if modifying ciphers used (tmm --servercipher 'ALL', and in server-ssl profile - several variations tried, from ALL to 'DEFAULT:EDH'). The IIS server configuration can't be modified. Any suggestions regarding cipher matching would be appreciate - devcentral articles, posts, askf5 SOLs already screened.