For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

someguy's avatar
someguy
Icon for Nimbostratus rankNimbostratus
Oct 28, 2014

Unsetting an attribute on tmsh modify

Seems that this is a simple thing. Right now I have a client-ssl profile that looks like the below. How can I use a tmsh command to unset or make it so the ciphers are assumed from the parent profile?

ltm profile client-ssl testblah {
    ciphers ALL:!SSLv2:!SSLv3
    defaults-from my_parent_ssl_profile
}
application delivery
LTM
management
TMSH
tmsh scripting

3 Replies

  • nag_54823's avatar
    nag_54823
    Icon for Cirrostratus rankCirrostratus
    Oct 29, 2014

    yep . you are right. why can't we delete and create the clientssl profile again ?

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Oct 29, 2014

    Seems like a feature request. Similar question was posted on RestAPI.

    May be can try following. Not exactly what is required. 

    tmsh list ltm profile client-ssl my_parent_ssl_profile ciphers \
| awk '/ciphers/{print $2}' \
| xargs -I{} tmsh modify ltm profile client-ssl  testblah ciphers '{}'