Forum Discussion
NimbostratusTMSH - Client SSL Profile, Remove Certificate Key Chain Override
Hey guys,
Hopefully a really quick one for you. For some historic reason, we currently have a setup where we have some parent SSL profile parent-ssl-PROFILE, and a number of children-ssl-PROFILE's.
The parent-ssl-PROFILE has a certificate key chain defined, and we want to the child profiles to make use of it. Unfortunately, they've currently all been set to overwrite the parent keychain.
If I wanted to remove that override and use the keychain provided by the parent, is there a way to do that through tmsh? Or is it just a matter of going to each profile, and unticking "custom"?
I ask about tmsh explicitly, as it's part of the flow our organization uses for tracking and managing changes, so anything that could be done through tmsh would be beneficial.
There is no way to override it using TMSH
You may be able to manually edit the
file to change the child client SSL profile'sbigip.conf
toinherit-certkeychain
, and then do atrue
, but this will cause a blip. It would be safer to override it using the GUI.load sys config
