For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ArunKumarV_3226's avatar
ArunKumarV_3226
Icon for Nimbostratus rankNimbostratus
Mar 14, 2019

Custom SSL PROFILE CLIENT

Hi, Need help with the Script on updating the SSL Client Profile with Custom Properties Custom Authentication Client Certificate - require Frequency- Always retain certificate - enabled Certificate Chain Traversal Depth - 9 Trusted Certificate Authorities - abc-cert

 

Update the Client Authentication using GUI but just curious to know how to update it via command line using tmsh script Thank you!

 

BIG-IP
security
TMSH

2 Replies

  • Yoann_Le_Corvi1's avatar
    Yoann_Le_Corvi1
    Icon for Cumulonimbus rankCumulonimbus
    Mar 14, 2019

    Hi

     

    That should do.

     

    modify ltm profile client-ssl peer-cert-mode require

     

    modify ltm profile client-ssl authenticate always

     

    modify ltm profile client-ssl retain-certificate true

     

    modify ltm profile client-ssl authenticate-depth 9

     

    modify ltm profile client-ssl ca-file abc-cert

     

  • Michael_Saleem's avatar
    Michael_Saleem
    Icon for MVP rankMVP
    Mar 14, 2019

    A lot of the options that you specified are default settings (e.g. certificate chain traversal depth - 9)

    You can use the following tmsh command:

    tmsh create ltm profile client-ssl  peer-cert-mode require ca-file abc-cert