Forum Discussion

mahnsc's avatar
mahnsc
Icon for Nimbostratus rankNimbostratus
Aug 08, 2018

Unexpected SSL Client Behavior

I have an SSL Client profile with a cipher list that is sorted by preferred cipher order: AES256-SHA256:AES256-SHA:DES-CBC3-SHA:AES128-SHA256:AES128-SHA:CAMELLIA256-SHA:CAMELLIA128-SHA:DHE-RSA-AE...
application delivery
BIG-IP
LTM
Tyler_Shaw_9498's avatar
Tyler_Shaw_9498
Historic F5 Account
Aug 09, 2018

The error with that specific client is due to the fact that Java 1.7 prior to version 1.7.0_131-b31 did not enable TLS 1.2 by default.

 

From the release notes:

 

Add TLS v1.1 and v1.2 to the client list of default-enabled protocols TLSv1.2 and TLSv1.1 are now enabled by default on the TLS client end-points. This is similar behavior to what already happens in JDK 8 releases.

 

Release notes here: https://www.oracle.com/technetwork/java/javase/7u131-relnotes-3338543.html