Forum Discussion

Bob_Rion_9275's avatar
Bob_Rion_9275
Icon for Nimbostratus rankNimbostratus
Apr 08, 2005

v9 "clientssl cipher insert enable" ? equivelent

We are trying to find a v9 featrure that is equivelent to the 4.x "clientssl cipher insert enable". Have looked at manual, askf5 etc and could not find a similar optoin in v9.

The goal is to simply put the SSL cipher information Cipher and Strength to use in an iRule to handle >=128 bit browsers with one pool and redirect if not >=128 SSL.

We accomplished this with 4.x with "clientssl cipher insert enable" in the SSL proxy and then the following type of iRule.

 
 rule stuff_sp_rule { 
    if (exists http_header("StuffSSL") and exists http_header("SSLClientCipher") and http_header("StuffSSL") == "BigIP2004") { 
       if (http_header("SSLClientCipher") contains "version=TLSv1/SSLv3" and http_header("SSLClientCipher") contains one of sslbits) { 
          if (http_uri == "/stuff") { 
             redirect to "https://xxx.yyy.zzz/stuff/" 
          } 
          else if (http_uri starts_with "/stuff/") { 
             use pool stuff_sp 
          } 
          else { 
             discard 
          } 
       } 
       else { 
          redirect to "https://xxx.yyy.zzz/ssl_upgrade.html" 
       } 
    } 
    else { 
       discard 
    } 
 }