Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

Custom SSL PROFILE CLIENT

Hi, Need help with the Script on updating the SSL Client Profile with Custom Properties Custom Authentication Client Certificate - require Frequency- Always retain certificate - enabled Certificate Chain Traversal Depth - 9 Trusted Certificate Authorities - abc-cert

Update the Client Authentication using GUI but just curious to know how to update it via command line using tmsh script Thank you!

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Hi

That should do.

modify ltm profile client-ssl peer-cert-mode require
modify ltm profile client-ssl authenticate always
modify ltm profile client-ssl retain-certificate true
modify ltm profile client-ssl authenticate-depth 9
modify ltm profile client-ssl ca-file abc-cert

0
Comments on this Answer
Comment made 1 month ago by ArunKumarV 54

Much Thanks. It worked!

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

A lot of the options that you specified are default settings (e.g. certificate chain traversal depth - 9)

You can use the following tmsh command:

tmsh create ltm profile client-ssl <CLIENTSSL PROFILE NAME> peer-cert-mode require ca-file abc-cert

0