Forum Discussion
bkhowson
Nimbostratus
NimbostratusSSLLabs A+, F5 LTM 11.4
We are testing a configuration to achieve an A+ grade on the SSLLabs.com server test.
The "DEFAULT" ciphers is documented in sol13156 and sol13171.
DEFAULT = NATIVE:!MD5:!EXPORT:!DES:!DHE:...
bkhowsonNimbostratus
NimbostratusAs an update, as of the June 20 snapshot of the OpenSSL codebase, the reported strength of the 3DES Cipher Suites is now 112 bits instead of 168. This will make @STRENGTH give AES128 priority over 3DES(112). This should flow into the next release of OpenSSL (1.0.1i), it would be nice if F5 integrated this change into the NATIVE suites to reflect the same sorting priority.
