Forum Discussion
TMSH - Client SSL Profile, Remove Certificate Key Chain Override
Hey guys,
Hopefully a really quick one for you. For some historic reason, we currently have a setup where we have some parent SSL profile parent-ssl-PROFILE, and a number of children-ssl-PROFILE's.
The parent-ssl-PROFILE has a certificate key chain defined, and we want to the child profiles to make use of it. Unfortunately, they've currently all been set to overwrite the parent keychain.
If I wanted to remove that override and use the keychain provided by the parent, is there a way to do that through tmsh? Or is it just a matter of going to each profile, and unticking "custom"?
I ask about tmsh explicitly, as it's part of the flow our organization uses for tracking and managing changes, so anything that could be done through tmsh would be beneficial.
1 Reply
There is no way to override it using TMSH
You may be able to manually edit the
file to change the child client SSL profile'sbigip.conf
toinherit-certkeychain
, and then do atrue
, but this will cause a blip. It would be safer to override it using the GUI.load sys config
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com