Forum Discussion

Grayson_149410's avatar
Grayson_149410
Icon for Nimbostratus rankNimbostratus
Jun 12, 2014

List of client ssl profiles certificate chain

I am fairly new to the world of LTM. We currently in the process of cleaning up our SSL certificates. We are running into an issues where many client ssl profiles are using an incorrect Certificate...
application delivery
LTM
management
security
storage
TMSH
  • Cory_50405's avatar
    Cory_50405
    Jun 12, 2014

    From tmsh, you can run 'list ltm profile client-ssl' and it'll print out each client SSL profile. You should be able to identify which profiles contain the offending chain from there.

     

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Jun 12, 2014

From tmsh, you can run 'list ltm profile client-ssl' and it'll print out each client SSL profile. You should be able to identify which profiles contain the offending chain from there.

 

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jun 12, 2014
    To expand on this answer and make filtering easier, use the one-line modifier and grep on the chain name: list ltm profile client-ssl one-line | grep chain
  • Grayson_149410's avatar
    Grayson_149410
    Icon for Nimbostratus rankNimbostratus
    Jun 12, 2014
    Awesome that was exactly what I was looking for. What is the best way to output this to a file so I can FTP in and pick it up?
  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jun 12, 2014
    This will output it to a file in /var/tmp, but run this from bash: tmsh list ltm profile client-ssl one-line | grep chain > /var/tmp/clientssl.txt