Forum Discussion
NimbostratusTLS question
I have a virtual server with only TLS1.2 enabled. The client supports TLS1.2 as well. But when it starts SSL HANDSHAKE it starts with TLS1.0, LTM seeing TLS1.0 sends ACK and then FIN the connection.
I we force client to send TLS1.2, everyone is happy.
Can we configure LTM to send a message back to the client in ServerHello stating that I support TLS1.2, If you support TLS1.2 please negotiate with TLS1.2.
I tried with SSL renegotiation but failed. Using 11.3.0.
3 Replies
mimlo_61970Cumulonimbus
This should work automatically. The client should send all of the versions it supports in it's hello, and the server should reply with the highest version that it supports that the client supports.
I would do a packet capture and see if the client is stating in it's client hello that it supports tls1.2
DevBabuCirrus
Where in client hello should i see that
- mimlo_61970
Under Handshake Protocol(the first subsection under the SSL Record Layer), the version is TLS 1.0. The client is stating they want TLS1.0, and as long as you support that, that is what will get used.
