Forum Discussion
What is default cipher of Configuration Utility
Hi all,
I've changed the ciphers of Configuration Utility. refer : https://support.f5.com/csp/article/K13405 And now, my customer wants to restore default cipher suite.
Where can I find default cipher suite? Is it same with SSL profile's DEFULAT cipher?
5 Replies
- JG
Cumulonimbus
Which version of BIG-IP are your running?
- Sunkwan_Kim_147
Nimbostratus
11.6.0 11.4.1 10.2.4
- svs
Cirrostratus
Doesn't Configuration Utility and other components like iControl are using OpenSSL instead of TMM builtin stacks?. If so you can use openssl command to get the ciphers, referred by cipherstrings:
openssl ciphers DEFAULT
or
openssl ciphers -v DEFAULT
Otherwise you can ask the tmm for the builtin ciphers:
tmm --clientciphers DEFAULT
Hope that helps.
Greets, svs
- JG
Cumulonimbus
The Configuration Utility is hosted by the Apache httpd server, which uses openssl. So the above openssl commands are the right means to find the information you need.
- JG
Cumulonimbus
I think we may have misunderstood your question. You were actually asking for the list of ciphersuites defined for the Configuration Utility as it comes with a specific BIG-IP release, not the list of ciphersuites as represented by the keyword "DEFAULT".
Please see the following:
K13405: Restricting Configuration utility access to clients using high-encryption SSL ciphers (11.x)
and follow the links in the article for information about other releases.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com