Forum Discussion
but when we un this command directly on f5 cli , we get complete output ..
thanks chrros95 , below command worked .
curl -vvvk --ciphers ' ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:!DH:@STRENGTH' https://192.168.100.13:9443
- Blue_whaleFeb 10, 2022Cirrocumulus
can you please tell me what exactly --ciphers ' ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:!DH:@STRENGTH' this command does ..
- chrros95Feb 14, 2022Altostratus
With this command the ciphers that curl is allowed to use are selected. First all possible ciphers are selected (ALL) and then some weak ciphers (!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4) are excluded. By excluding all Diffie-Hellman ciphers (!DH) we address the issue that curl is mentioning. The last thing (@STRENGTH) is to sort the ciphers according to their strength.
For more information about building cipher string read, for example https://www.openssl.org/docs/man1.0.2/man1/ciphers.html