Dell 3-DNS Spezifikationen PDF herunterladen (Seite 181)

Proxies

BIG-IP® Reference Guide 4 - 101

the client connection being closed. If the client is using a browser, the user

will likely receive an error message indicating that the web page failed to

load.

The following sections describe how to configure cipher lists and protocol

versions for the SSL proxy.

Configuring cipher lists

You can configure the list of SSL ciphers that are available for both

client-side and server-side SSL connections. Whether using the

Configuration utility or the bigpipe proxy command, you can specify a

string to indicate the available list of SSL ciphers.

Note

To see the complete syntax for the cipher list, see the following OpenSSL

web site: http://www.openssl.org/docs/apps/ciphers.html.

To configure a cipher list using the Configuration utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. In either or both of the Client Cipher List String or Server Cipher

List String boxes, type a properly-formatted string.

4. Click Done.

To configure a cipher list from the command line

To specify a list of ciphers from the command line, specify the client-side

cipher list or the server-side cipher list, as follows:

b proxy <ip>:<service> [clientssl] ciphers \"quoted string\"

b proxy <ip>:<service> serverssl ciphers \"quoted string\"

Tip

You can use the openssl ciphers command to test the validity of a cipher

string.

Configuring invalid protocol versions

For both client-side and server-side SSL connections, you can specify SSL

protocol versions that should not be allowed. You can declare up to two of

the following three protocol versions to be invalid: SSLv2, SSLv3, and

TLSv1. If no protocol versions are specified, all SSL protocol versions are

allowed. If all three protocol versions are disallowed, no SSL sessions can

be successfully negotiated.

1 2 ... 176 177 178 179 180 181 182 183 184 185 186 ... 425 426

Keine Kommentare

Dell 3-DNS Spezifikationen Seite 181