1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
{
"kind": "tm:ltm:profile:client-ssl:client-sslstate",
"name": "foo",
"partition": "Common",
"fullPath": "/Common/foo",
"generation": 351,
"selfLink": "https://localhost/mgmt/tm/ltm/profile/client-ssl/~Common~foo?ver=13.0.0",
"alertTimeout": "indefinite",
"allowDynamicRecordSizing": "disabled",
"allowExpiredCrl": "disabled",
"allowNonSsl": "disabled",
"appService": "none",
"authenticate": "once",
"authenticateDepth": 9,
"bypassOnClientCertFail": "disabled",
"bypassOnHandshakeAlert": "disabled",
"caFile": "none",
"cacheSize": 262144,
"cacheTimeout": 3600,
"cert": "/Common/default.crt",
"certReference": {
"link": "https://localhost/mgmt/tm/sys/file/ssl-cert/~Common~default.crt?ver=13.0.0"
},
"certExtensionIncludes": [
"basic-constraints",
"subject-alternative-name"
],
"certLifespan": 30,
"certLookupByIpaddrPort": "disabled",
"chain": "none",
"cipherGroup": "none",
"ciphers": "DEFAULT",
"clientCertCa": "none",
"crlFile": "none",
"defaultsFrom": "/Common/clientssl",
"defaultsFromReference": {
"link": "https://localhost/mgmt/tm/ltm/profile/client-ssl/~Common~clientssl?ver=13.0.0"
},
"description": "none",
"destinationIpBlacklist": "none",
"destinationIpWhitelist": "none",
"forwardProxyBypassDefaultAction": "intercept",
"genericAlert": "enabled",
"handshakeTimeout": "10",
"hostnameBlacklist": "none",
"hostnameWhitelist": "none",
"inheritCertkeychain": "true",
"key": "/Common/default.key",
"keyReference": {
"link": "https://localhost/mgmt/tm/sys/file/ssl-key/~Common~default.key?ver=13.0.0"
},
"maxActiveHandshakes": "indefinite",
"maxAggregateRenegotiationPerMinute": "indefinite",
"maxRenegotiationsPerMinute": 5,
"maximumRecordSize": 16384,
"modSslMethods": "disabled",
"mode": "enabled",
"notifyCertStatusToVirtualServer": "disabled",
"ocspStapling": "disabled",
"tmOptions": [
"dont-insert-empty-fragments"
],
"peerCertMode": "ignore",
"peerNoRenegotiateTimeout": "10",
"proxyCaCert": "none",
"proxyCaKey": "none",
"proxySsl": "disabled",
"proxySslPassthrough": "disabled",
"renegotiateMaxRecordDelay": "indefinite",
"renegotiatePeriod": "indefinite",
"renegotiateSize": "indefinite",
"renegotiation": "enabled",
"retainCertificate": "true",
"secureRenegotiation": "require",
"serverName": "none",
"sessionMirroring": "disabled",
"sessionTicket": "disabled",
"sessionTicketTimeout": 0,
"sniDefault": "false",
"sniRequire": "false",
"sourceIpBlacklist": "none",
"sourceIpWhitelist": "none",
"sslForwardProxy": "disabled",
"sslForwardProxyBypass": "disabled",
"sslSignHash": "any",
"strictResume": "disabled",
"uncleanShutdown": "enabled",
"certKeyChain": [
{
"name": "default",
"appService": "none",
"cert": "/Common/default.crt",
"certReference": {
"link": "https://localhost/mgmt/tm/sys/file/ssl-cert/~Common~default.crt?ver=13.0.0"
},
"chain": "none",
"key": "/Common/default.key",
"keyReference": {
"link": "https://localhost/mgmt/tm/sys/file/ssl-key/~Common~default.key?ver=13.0.0"
}
}
]
}
|
