Symptoms
Starting from BIG-IP v11.5.0, SSLv3 ciphers are removed from DEFAULT ciphers in clientssl/serverssl profiles, and specifying "DEFAULT:SSLv3" in the cipher list does not work.
Impact
If you want to add it back, using "DEFAULT:SSLv3" does not work.
Conditions
Starting from v11.5.0, SSLv3 ciphers are removed from DEFAULT ciphers in clientssl/serverssl profiles
Workaround
clientssl profile uses:
!SSLv2:!EXPORT:!MD5:RSA+AES:RSA+3DES:RSA+RC4:ECDHE+AES:ECDHE+3DES:ECDHE+RC4
serverssl profile uses:
!SSLv2:!EXPORT:!MD5:RSA+AES:RSA+3DES:RSA+RC4:ECDHE+AES:ECDHE+3DES
Fix Information
Allow "DEFAULT:SSLv3" to add SSLv3 after DEFAULT.
