For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steven_normole's avatar
steven_normole
Icon for Cirrus rankCirrus
May 25, 2025

Extract info from client ssl profile

I am needing to be able to loop through each client ssl profile and write the profile name and the information cert, chain, and key from  the cert-key-chain.  I just cannot get to work. I thought wo...
cloud
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
May 25, 2025

You can do this

[root@awaf:Active:Standalone] config # tmsh list ltm profile client-ssl key cert chain | sed -z 's/{\n\([^}]*\)\n*}/{\1}/g; s/\n/ /g; s/} */}\n/g'
ltm profile client-ssl clientssl {    cert default.crt     chain none     key default.key }
ltm profile client-ssl clientssl-insecure-compatible {    cert default.crt     chain none     key default.key }
ltm profile client-ssl clientssl-quic {    cert default.crt     chain none     key default.key }
ltm profile client-ssl clientssl-secure {    cert default.crt     chain none     key default.key }
ltm profile client-ssl crypto-server-default-clientssl {    cert default.crt     chain none     key default.key }
ltm profile client-ssl splitsession-default-clientssl {    cert default.crt     chain none     key default.key }
ltm profile client-ssl wom-default-clientssl {    cert default.crt     chain none     key default.key }

And then awk the hell out of it.

Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
May 25, 2025

Since I did it half-way, I can also do it completely

[root@awaf:Active:Standalone] config # tmsh list ltm profile client-ssl key cert chain | sed -z 's/{\n\([^}]*\)\n*}/{\1}/g; s/\n/ /g; s/} */}\n/g' | awk '/^ltm profile client-ssl/ {name = $4; cert = chain = key = ""; for (i = 5; i <= NF; i++) {if ($i == "cert") cert = $(i+1); if ($i == "chain") chain = $(i+1); if ($i == "key") key = $(i+1)} printf "%s cert=%s chain=%s key=%s\n", name, cert, chain, key}'
clientssl cert=default.crt chain=none key=default.key
clientssl-insecure-compatible cert=default.crt chain=none key=default.key
clientssl-quic cert=default.crt chain=none key=default.key
clientssl-secure cert=default.crt chain=none key=default.key
crypto-server-default-clientssl cert=default.crt chain=none key=default.key
splitsession-default-clientssl cert=default.crt chain=none key=default.key
wom-default-clientssl cert=default.crt chain=none key=default.key