12-Oct-2020 06:54
Hello everyone,
is there a way to view all unbound ssl client profiles?
Thank Andre
12-Oct-2020 07:08
Do you mean the client SSL profiles which are not associated with any of the virtual server? If yes, you can upload Qkview file on F5 ihealth and see all the profiles and their association.
16-Oct-2020 00:45
Yes exactly that's what I mean
Where exactly can I find this in F5 ihealth
12-Oct-2020 08:08
Hi Andre,
tmsh show ltm virtual profiles | grep 'Ltm::ClientSSL Profile:' | awk '{print $4}' | sort -u > cs-bind.txt
tmsh list ltm profile client-ssl | grep ltm | awk '{print $4}' | sort -u > cs-all.txt
diff cs-bind.txt cs-all.txt | grep ">" | awk '{print $2}'
tmsh show ltm virtual profiles | grep 'Ltm::ServerSSL Profile:' | awk '{print $4}' | sort -u > ss-bind.txt
tmsh list ltm profile server-ssl | grep ltm | awk '{print $4}' | sort -u > ss-all.txt
diff ss-bind.txt ss-all.txt | grep ">" | awk '{print $2}'
16-Oct-2020 04:59
You can check it under Config Explorer > Ltm > Profile> ClientSSL Profile on ihealth page once qkview file is uploaded.
Hope it helps!
Mayur
19-Oct-2020 06:06
See if you find this helpful.
https://devcentral.f5.com/s/articles/bash-script-to-find-clientssls-mapped-to-virtual-servers-1143