Forum Discussion

dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Oct 21, 2008

Detecting TLS v1.1

Does anyone know what string (if anything) LTM 9.4.x will return for [SSL::cipher version] if the client is using TLS v1.1 (ie Opera)? I'm trying to account for the possibility of a TLS v1.1 ...
application delivery
dev
devops
iRules
Steve_Scott_873's avatar
Steve_Scott_873
Historic F5 Account
Oct 22, 2008
Why not just set no SSLv2 on your Client Profile? The error message isn't as friendly, but SSLv2 has serious security flaws and has been replaced with SSLv3 since 1996.

 

 

Either that or turn it on its head and match $ver == "SSLv2", which is only one comparision and will therefore save you a few cpu cycles. Also standards will continue to evolve and TLS 1.2 was approved in august