sys file apache-ssl-cert
sys file apache-ssl-cert(1) BIG-IP TMSH Manual sys file apache-ssl-cert(1)
NAME
apache-ssl-cert - Manages an Apache SSL certificate file.
MODULE
sys file
SYNTAX
Configure the apache-ssl-cert component within the sys file module using the syntax shown in the following sections.
CREATE
create apache-ssl-cert [name]
options:
source-path [URL]
DISPLAY
list apache-ssl-cert
list apache-ssl-cert [ [ [name] | [glob] | [regex] ] ... ]
DELETE
delete apache-ssl-cert [name]
DESCRIPTION
You can use the apache-ssl-cert component to create, delete, or list an SSL certificate.
EXAMPLES
create apache-ssl-cert new-cert source-path http:/cert-server/cert_store/certs/cert1.crt
Downloads the certificate from the given URL into file-store, creates an SSL certificate file named new-cert, and saves the
given URL in the source-path attribute.
create apache-ssl-cert new-cert source-path file:/shared/save/cert1.crt
Specifies the location of the file on the local disk (use this when the file has already been created on the local disk).
SUPPORTED URL FORMAT
Supported URL schemes are HTTP, HTTPS, FTP, FTPS, and FILE.
OPTIONS
bundle-certificates
Lists data about all the certificates in the bundle, if the certificate file is a bundle. This option must be
explicitly specified; otherwise, this field will be none.
certificate-key-curve-name
Specifies the Elliptical Curve name of the cryptographic key associated with this certificate. This field will be set
to none if an Elliptical Curve key is not present.
certificate-key-size
Specifies the number of bits in the key associated with this certificate.
checksum
Specifies a cryptographic hash or checksum of the file contents for use in verification of file integrity.
create-time
Specifies the time at which the file-object was created.
created-by
Specifies the user who originally created the file-object.
expiration-date
Specifies the date at which this certificate expires. Stored as a POSIX time.
expiration-string
Specifies a string representation of the expiration date of the certificate.
fingerprint
Displays the SHA-256 fingerprint of the certificate.
is-bundle
Specifies whether the certificate file is a bundle (that is, whether it contains more than one certificate).
issuer
Specifies X509 information of the certificate's issuer. If the cert is a bundle, this displays the issuer information
for the primary (first) cert in the bundle.
key-type
Specifies the type of cryptographic key associated with this certificate.
last-update-time
Specifies the last time at which the file-object was updated/modified.
mode Specifies the UNIX file permissions mode for the file associated with this file-object as a numerical value.
partition
Specifies the administrative partition where the certificate resides.
revision
Identifies the latest revision of the file. The revision starts with 1 and gets incremented on each update.
serial-number
Specifies the certificate's serial number.
size Specifies the size (in bytes) of the file associated with this file object.
source-path [URL]
This attribute takes a URL, for example:
source-path http://cert-server/cert_store/certs/vs_132.crt
source-path https://cert-server/cert_store/certs/vs_132.crt
source-path ftp://username:password@server/cert_store/certs/vs_132.crt
subject
Specifies X509 information of the certificate's subject. If the cert is a bundle, this displays the subject
information for the primary (first) cert in the bundle.
subject-alternative-name
Specifies a standard X.509 extension as shown in RFC 2459.
updated-by
Specifies the user who last updated the file-object.
version
Specifies the X509 version of the certificate.
SEE ALSO
create, delete, glob, list, ltm profile client-ssl, ltm profile server-ssl, modify, regex, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or mechanical, including
photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal
use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2008-2012. All rights reserved.
BIG-IP 2017-11-16 sys file apache-ssl-cert(1)