Forum Discussion

Erich_Macbeth_2's avatar
Erich_Macbeth_2
Icon for Nimbostratus rankNimbostratus
Aug 17, 2017

Modify iApp SSL profile

I need to modify the cipher list of all SSL profiles on a LTM but do not see any of the SSL profiles that are used within any of the iApps in the profile list when I issues the list profile command (tmsh list ltm profile client-ssl). Is it possible to modify the profiles through the CLI when 'strict updates' is enabled on the iApp?

 

2 Replies

  • you should be able to edit any profiles that are not created by the iApp. which ones do you see with

    tmsh list ltm profile client-ssl
    that you don't see in the GUI?

  • I was able to figure out how to modify the cipher list from the CLI using the following commands:

     

    tmsh modify sys application service iapp_name.app/iapp_name strict-updates disabled tmsh modify ltm profile client-ssl /Common/iapp_name.app/ssl_profile_name ciphers 'cipher_list' tmsh modify sys application service iapp_name.app/iapp_name strict-updates enabled

     

    I have not been able to figure out how to get it to default to the parent SSL profile.