Hi all,
I’m trying to add PFS support but when trying to follow the document “404 Page not found | BIG-IP Documentation” and add the command “tmsh create /ltm profile client-ssl ciphers DEFAULT:ECDHE:ECDHE_ECDSA:DHE_” I get the following error: invalid keyword.
In addition, when adding only “DEFAULT:ECDHE” and checking using the command “tmm --clientciphers ECDHE” i get nothing:
[admin@lb01:Active:Changes Pending] ~ tmm --clientciphers ECDHE ID SUITE BITS PROT METHOD CIPHER MAC KEYX
Can you please assist?
Thanks Eli
ECDHE is unavailable in v11.3. At least v11.4 is required for any ECDHE cipher suites.
Thank you! That’s weird the document clearly specifies 11.0.0 through 11.4.1.
Here is the list of ciphers in each version. 404 Page not found | BIG-IP Documentation . The document you are referring to does not say ECDHE is supported in 11.0.0 through 1.4.1. EDH is, but that is not ECDHE. EDH is ephemeral Diffie-Hellman using RSA keys vs ECDHE is ephemeral Diffie-Hellman using EC(eliptical curve) keys.
This is a better reference: 404 Page not found | BIG-IP Documentation
ECHDE support doesn’t come until 11.4.0
