Forum Discussion

Andrei_Popiste1's avatar
Andrei_Popiste1
Icon for Nimbostratus rankNimbostratus
Jan 17, 2011

SSL serverside cipher mismatch

In a hardware-based 10.2(+HF2) LTM installation, LTM cannot negotiate cipher with an IIS6 server (ssldump reports a TCP close sequence after client hello).     Default https monitor reports TLS...
config
design
Andrei_Popiste1's avatar
Andrei_Popiste1
Icon for Nimbostratus rankNimbostratus
Jan 19, 2011
Thank you for the promptitude of your answer.

 

 

tmm --serverciphers 'COMPAT' | grep DHE returns only DHE-RSA-, not DHE-DSS-.

 

 

Since I have no access to server, I suspect that real server's certificate was issued using stock Microsoft Base CSP not Microsoft RSA SChannnel Cryptographic Provider.

 

 

Thank you for your time and support.