Enable TLS 1.3 and Disable DH group

Question

Hello Experts,I have a task need to enable TLS 1.3 and disable DH group.To enable TLS 1.3, I can use cipher group to do by this link&nbsp;https://my.f5.com/manage/s/article/K10251520To disable DH, I can use DEFAULT:!DHBut how to do this together?

paulius · Accepted Answer

SolarJeans This link should assist you in creating the appropriate custom cipher group.
https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-ltm-configuring-custom-cipher-string-for-ssl-negotiation/configuring-a-custom-cipher-string-for-ssl-negotiation.html

samir · Answer

You can try something like this to enable tls1.3 and disable DHE
DEFAULT:TLSV1_3:!DHE

solarjeans · Answer

Hello,Yes, I try to create custom cipher rule and custom cipher group and issue fixed. Thanks a lot.

Forum Discussion

Enable TLS 1.3 and Disable DH group

3 Replies

Recent Discussions

F5Access | MacOS Sonoma

Rewrite uri translation not working

Chrome V 124+ on MacOS - Virtual Server Access Issue

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

Enable telnet on SSH

Certified Kubernetes Administrator - Study Group

Enable/Disable pool member

SSL Orchestrator Advanced Use Cases: Enabling GCloud Organization Restrictions

Disabling Weak Ciphers