cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

TLSv1.3 validation not showing in SSL Labs

The-messenger
Cirrus
Cirrus

I'm running 14.1.2.7 on a VCMP guest, Host is running 14.1.2.1. I have removed the No TLSv1.3 option to enable 1.3 in my SSL Profile. When testing from SSL Labs, it returns No --- TLSv 1.3. I have enabled the F5Secure cipher group.

 

Is there something else that needs to be configured to enable 1.3?

1 ACCEPTED SOLUTION

Lidev
MVP
MVP

Hi guys,

in v14.1, TLS 1.3 is available : K97098157: SSL ciphers supported on BIG-IP platforms (14.x)

(* Important: The TLS 1.3 protocol is not enabled by default in BIG-IP 14.1.0; enable and use TLS 1.3 only in a test environment.)

 

Regards

View solution in original post

6 REPLIES 6

ecce
Cirrostratus
Cirrostratus

I think you need v15 and enable the f5-quic cipher group where you have ciphers like TLS13-AES128-GCM-SHA256/TLS1.3.

, To see the supported client end ciphers, you can try below command. And compare same with the cipher suits in the group that you are using.

 

tmsh run util clientssl-ciphers TLSv1_3

 

Thanks, appreciate it.

Thanks!

Lidev
MVP
MVP

Hi guys,

in v14.1, TLS 1.3 is available : K97098157: SSL ciphers supported on BIG-IP platforms (14.x)

(* Important: The TLS 1.3 protocol is not enabled by default in BIG-IP 14.1.0; enable and use TLS 1.3 only in a test environment.)

 

Regards

Thank you