F5 SSL证书 cipher配置

1 . 登录F5控制台

2 .点击 Local Traffic > Profiles > SSL > Client.

3 . 点击需要配置的profile

4 . 在配置中选择高级选项

5 . 勾选定制, 在cipher框中输入相应配置

例如:

DEFAULT:ECDHE:ECDHE_ECDSA:DHE_DSS

DEFAULT:-RSA:!DES:!RC4:!SSLv2:!SSLv3:!TLSv1:TLSv1_2:COMPAT:AES128-GCM-SHA256

每个配置的意思可以查看下表:

Parameter Definition
!SSLv2 Do not use SSLv2 protocol
!EXPORT Do not use EXPORT grade (weak) ciphers
DHE+AES-GCM Use DHE+AES-GCM ciphers
DHE+AES Use DHE+AES ciphers
DHE+3DES Use DHE+3DES ciphers
RSA+AES-GCM Use RSA+AES-GCM ciphers
RSA+AES Use RSA+AES ciphers
RSA+3DES Use RSA+3DES ciphers
ECDHE+AES-GCM Use ECDHE+AES-GCM ciphers
ECDHE+AES Use ECDHE+AES ciphers
ECDHE+3DES Use ECDHE+3DES ciphers
-MD5 Do not use MD5 ciphers
-SSLv3 Do not use SSLv3 protocol
-RC4 Do not use RC4 ciphers

猜你喜欢

转载自www.cnblogs.com/nella/p/9890246.html