Forum Discussion

mahir's avatar
mahir
Icon for Altostratus rankAltostratus
Nov 12, 2020

disable disable TLS extended master secret extensions on the SSL

Hi 

 

I would like to disable the option TLS extended master secret extensions over profile SSL at my Bigip 14.1.28.

I am unable to execute the command recommend by the link below :

 

https://api-u.f5.com/support/kb-articles/K66202244?pdf

modify /sys db tmm.ssl.extmsenabled false

 

 

BIG-IP
security
TMSH
  • Giorgi_Gujabidz's avatar
    Giorgi_Gujabidz
    Icon for Cirrus rankCirrus
    Nov 13, 2020

    Hi, I just want to double check, did you run this command in Traffic Management Shell - tmsh? As if you tried to run this directly in Linux Shell (bash), it won't work. You have to either run the entire command from bash:

     

    tmsh modify /sys db tmm.ssl.extmsenabled false

     

    Or you have first type tmsh, to enter the TMM shell and then type your command:

     

    modify /sys db tmm.ssl.extmsenabled false

     

    Here is a link, with more details: https://support.f5.com/csp/article/K66202244