For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steven_normole's avatar
steven_normole
Icon for Cirrus rankCirrus
May 25, 2025

Extract info from client ssl profile

I am needing to be able to loop through each client ssl profile and write the profile name and the information cert, chain, and key from  the cert-key-chain.  I just cannot get to work. I thought wo...
cloud
zamroni777's avatar
zamroni777
Icon for MVP rankMVP
May 28, 2025

use one line option to make the tmsh output scripting friendly, e.g.

list ltm profile client-ssl one-line

 

steven_normole's avatar
steven_normole
Icon for Cirrus rankCirrus
May 28, 2025

I agree and I usually use the one-line and just print what field i needed.  What I encountered was the profiles output was different on some of the client ssl profiles.

The two profiles listed below shows the output is not the same.

ltm profile client-ssl bantam.dcpds.cpms_cs { app-service none cert bantam.dcpds.cpms.osd.mil_10_10_2025 cert-key-chain { bantam.dcpds.cpms.osd_ALL_CA_CERTS_BUNDLE-21AUGUST2024_0 { cert bantam.dcpds.cpms.osd.mil_10_10_2025 chain ALL_CA_CERTS_BUNDLE-21AUGUST2024 key bantam.dcpds.cpms.osd.mil_10_10_2025 } } defaults-from clientssl inherit-ca-certkeychain true inherit-certkeychain false key bantam.dcpds.cpms.osd.mil_10_10_2025 options { dont-insert-empty-fragments no-tlsv1.3 no-tlsv1.1 no-dtlsv1.2 no-sslv3 no-tlsv1 } }

ltm profile client-ssl bantamemp.dcpds.cpms_cs { app-service none cert-key-chain { bantamemp.dcpds.cpms.osd_DoD_CA_Intermediate_Bundle_27May2025_0 { cert bantamemp.dcpds.cpms.osd.mil-2022 chain DoD_CA_Intermediate_Bundle_27May2025 key bantamemp.dcpds.cpms.osd.mil-2022 } } defaults-from clientssl inherit-ca-certkeychain true inherit-certkeychain false options { dont-insert-empty-fragments no-tlsv1.3 no-tlsv1.1 no-dtlsv1.2 no-sslv3 no-tlsv1 } }