sys file ssl-cert

sys file ssl-cert(1)	      BIG-IP TMSH Manual	  sys file ssl-cert(1)



NAME
       ssl-cert - Manages a SSL certificate file.

MODULE
       sys file

SYNTAX
       Configure the ssl-cert component within the sys file module using the
       syntax shown in the following sections.

   CREATE/MODIFY
	create ssl-cert [name]
	  options:
	    app-service [[string] | none]
	    source-path [URL]

	modify ssl-cert [name]
	  options:
	    app-service [[string] | none]
	    cert-validation-options [none | ocsp]
	    cert-validators [none | [cert_validator_name]]
	    issuer-cert [none | [issuer_cert_name]]
	    source-path [URL]

	edit ssl-cert [ [ [name] | [glob] | [regex] ] ... ]

   DISPLAY
	list ssl-cert
	list ssl-cert [ [ [name] | [glob] | [regex] ] ... ]

   DELETE
	delete ssl-cert [name]

DESCRIPTION
       You can use the ssl-cert component to create, edit, delete, list or
       modify an SSL certificate.

EXAMPLES
       create ssl-cert new-cert source-path
       http:/cert-server/cert_store/certs/cert1.crt

       Downloads the certificate from the given URL into file-store, creates
       an SSL certificate file named new-cert, and saves the given URL in the
       source-path attribute.

       create ssl-cert new-cert source-path file:/shared/save/cert1.crt

       Specifies the location of the file on the local disk (use this when the
       file has already been created on the local disk).

   SUPPORTED URL FORMAT
       Supported URL schemes are HTTP, HTTPS, FTP, FTPS, and FILE.

OPTIONS
       app-service
	    Specifies the name of the application service to which the object
	    belongs. The default value is none. Note: If the strict-updates
	    option is enabled on the application service that owns the object,
	    you cannot modify or delete the object. Only the application
	    service can modify or delete the object.

       bundle-certificates
	    Specifies a list of data about all the certificates in the bundle,
	    if the certificate file is a bundle; otherwise, this field will be
	    none.

       cert-validation-options
	    Specifies the option used for validating the certificate status.

       cert-validators
	    Specifies the name of the cert-validators used for validating the
	    certificate status. At most one cert-validator can be configured
	    for each cert-validation type.

       certificate-key-size
	    Specifies the number of bits in the key associated with this
	    certificate.

       checksum
	    Specifies a cryptographic hash or checksum of the file contents
	    for use in verification of file integrity.

       create-time
	    Specifies the time at which the file-object was created.

       created-by
	    Specifies the user who originally created the file-object.

       expiration-date
	    Specifies the date at which this certificate expires. Stored as a
	    POSIX time.

       expiration-string
	    Specifies a string representation of the expiration date of the
	    certificate.

       fingerprint
	    Specifies the cryptographic fingerprint of the certificate.

       is-bundle
	    Specifies whether the certificate file is a bundle (that is,
	    whether it contains more than one certificate).

       issuer
	    Specifies X509 information of the certificate's issuer. If the
	    cert is a bundle, this displays the issuer information for the
	    primary (first) cert in the bundle.

       issuer-cert
	    Specifies the name of the issuer certificate for this certificate.

       key-type
	    Specifies the type of cryptographic key associated with this
	    certificate.

       last-update-time
	    Specifies the last time at which the file-object was
	    updated/modified.

       mode Specifies the UNIX file permissions mode for the file associated
	    with this file-object as a numerical value.

       revision
	    Specifies the latest revision of the file. The revision starts
	    with 1 and gets incremented on each update.

       serial-number
	    Specifies the certificate's serial number.

       size Specifies the size (in bytes) of the file associated with this
	    file object.

       source-path [URL]
	    This attribute takes a URL, for example:

		 source-path http://cert-server/cert_store/certs/vs_132.crt

		 source-path https://cert-server/cert_store/certs/vs_132.crt

		 source-path
		 ftp://username:password@server/cert_store/certs/vs_132.crt

       subject
	    Specifies X509 information of the certificate's subject. If the
	    cert is a bundle, this displays the subject information for the
	    primary (first) cert in the bundle.

       subject-alternative-name
	    Specifies a standard X.509 extension as shown in RFC 2459.

       updated-by
	    Specifies the user who last updated the file-object.

       version
	    Specifies the X509 version of the certificate.

SEE ALSO
       create, delete, edit, glob, list, ltm profile client-ssl, ltm profile
       server-ssl, modify, regex, tmsh

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2008-2013. All rights reserved.



BIG-IP				  2016-07-01		  sys file ssl-cert(1)