1 . 登錄F5控制台
2 .點擊 Local Traffic > Profiles > SSL > Client.
3 . 點擊需要配置的profile
4 . 在配置中選擇高級選項
5 . 勾選定制, 在cipher框中輸入相應配置
例如:
DEFAULT:ECDHE:ECDHE_ECDSA:DHE_DSS
DEFAULT:-RSA:!DES:!RC4:!SSLv2:!SSLv3:!TLSv1:TLSv1_2:COMPAT:AES128-GCM-SHA256
每個配置的意思可以查看下表:
Parameter | Definition |
!SSLv2 | Do not use SSLv2 protocol |
!EXPORT | Do not use EXPORT grade (weak) ciphers |
DHE+AES-GCM | Use DHE+AES-GCM ciphers |
DHE+AES | Use DHE+AES ciphers |
DHE+3DES | Use DHE+3DES ciphers |
RSA+AES-GCM | Use RSA+AES-GCM ciphers |
RSA+AES | Use RSA+AES ciphers |
RSA+3DES | Use RSA+3DES ciphers |
ECDHE+AES-GCM | Use ECDHE+AES-GCM ciphers |
ECDHE+AES | Use ECDHE+AES ciphers |
ECDHE+3DES | Use ECDHE+3DES ciphers |
-MD5 | Do not use MD5 ciphers |
-SSLv3 | Do not use SSLv3 protocol |
-RC4 | Do not use RC4 ciphers |