F5 SSL證書 cipher配置
阿新 • • 發佈：2018-11-01
1 . 登入F5控制檯
2 .點選 Local Traffic > Profiles > SSL > Client.
3 . 點選需要配置的profile
4 . 在配置中選擇高階選項
5 . 勾選定製， 在cipher框中輸入相應配置
例如：
DEFAULT:ECDHE:ECDHE_ECDSA:DHE_DSS
DEFAULT:-RSA:!DES:!RC4:!SSLv2:!SSLv3:!TLSv1:TLSv1_2:COMPAT:AES128-GCM-SHA256
每個配置的意思可以查看下錶：
| Parameter | Definition |
| !SSLv2 | Do not use SSLv2 protocol |
| !EXPORT | Do not use EXPORT grade (weak) ciphers |
| DHE+AES-GCM | Use DHE+AES-GCM ciphers |
| DHE+AES | Use DHE+AES ciphers |
| DHE+3DES | Use DHE+3DES ciphers |
| RSA+AES-GCM | Use RSA+AES-GCM ciphers |
| RSA+AES | Use RSA+AES ciphers |
| RSA+3DES | Use RSA+3DES ciphers |
| ECDHE+AES-GCM | Use ECDHE+AES-GCM ciphers |
| ECDHE+AES | Use ECDHE+AES ciphers |
| ECDHE+3DES | Use ECDHE+3DES ciphers |
| -MD5 | Do not use MD5 ciphers |
| -SSLv3 | Do not use SSLv3 protocol |
| -RC4 | Do not use RC4 ciphers |