Forum Discussion
Nimbostratusunable to restrict the configuration utility( httpd) cipher suite for the version TSL1.1. Our aim is to only use TLS1.2
unable to restrict the configuration utility( httpd) cipher suite for the version TSL1.1. Our aim is to only use TLS1.2
we tried below command to change, but it is not working
modify /sys httpd ssl-ciphersuite 'ALL:!ADH:!EXPORT:!eNULL:!MD5:!DES:!SSLv2:!SSLv3:!TLSv1:!TLSv1_1'
once we remove TLS1_1 from above it worked.. our version is 11.5.3
JGCumulonimbus
What you really need is to disable the insecure SSL protocols altogether:
tmsh modify /sys httpd ssl-protocol "TLSv1.2" tmsh save /sys config. Also see K17491 for any error message. [Edited]
- Sharadwi_352731
Was someone able to fix this issue? I am using v11.5.3 as well
Only1masterbla1Cirrus
Please check this note:
K17491: Unable to limit Configuration utility access to clients using only TLSv1.1 or TLSv1.2
https://support.f5.com/csp/article/K17491
- Sharadwi_352731
Thank you . This is for PCI standards. It requires TLSv1.2 to be used for the utility. Does changing the cipher suite help ?