For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Moshe_Hyzon_609's avatar
Moshe_Hyzon_609
Icon for Nimbostratus rankNimbostratus
Aug 13, 2014

Setting advertised certificate authorities in client SSL profiles via icontrol

I cannot figure out if it is possible to set the "Advertised Certificate Authorities" (see sol10167: Overview of the Client SSL profile (9.x - 10.x) ) via the iControl API.

 

The iControl API as documented here: https://devcentral.f5.com/wiki/iControl.LocalLB__ProfileClientSSL.ashx

 

talks about set_client_certificate_ca_file* iControl calls, but they seem to set only the trusted CA.

 

application delivery
devops
iControl
LTM
management
security

1 Reply

  • mimlo_61970's avatar
    mimlo_61970
    Icon for Cumulonimbus rankCumulonimbus
    Aug 14, 2014

    Are you using v9 or v10? I can't test that, but in V11, set_client_certificate_ca_file_v2 is definately the WebUI equivalent to Advertised Certificate Authorities.

     

    The Trusted Certificate Authorities is set_ca_file_v2(and I assume set_ca_file in v9 and v10)