sys file ssl-cert
sys file ssl-cert(1) BIG-IP TMSH Manual sys file ssl-cert(1)
NAME
ssl-cert - Manages a SSL certificate file.
MODULE
sys file
SYNTAX
Configure the ssl-cert component within the sys file module using the
syntax shown in the following sections.
CREATE/MODIFY
create ssl-cert [name]
options:
app-service [[string] | none]
source-path [URL]
modify ssl-cert [name]
options:
app-service [[string] | none]
cert-validation-options [none | ocsp]
cert-validators [none | [cert_validator_name]]
issuer-cert [none | [issuer_cert_name]]
source-path [URL]
edit ssl-cert [ [ [name] | [glob] | [regex] ] ... ]
DISPLAY
list ssl-cert
list ssl-cert [ [ [name] | [glob] | [regex] ] ... ]
DELETE
delete ssl-cert [name]
DESCRIPTION
You can use the ssl-cert component to create, edit, delete, list or
modify an SSL certificate.
EXAMPLES
create ssl-cert new-cert source-path
http:/cert-server/cert_store/certs/cert1.crt
Downloads the certificate from the given URL into file-store, creates
an SSL certificate file named new-cert, and saves the given URL in the
source-path attribute.
create ssl-cert new-cert source-path file:/shared/save/cert1.crt
Specifies the location of the file on the local disk (use this when the
file has already been created on the local disk).
SUPPORTED URL FORMAT
Supported URL schemes are HTTP, HTTPS, FTP, FTPS, and FILE.
OPTIONS
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
bundle-certificates
Lists data about all the certificates in the bundle, if the
certificate file is a bundle. This option must be explicitly
specified; otherwise, this field will be none.
cert-validation-options
Specifies the option used for validating the certificate status.
cert-validators
Specifies the name of the cert-validators used for validating the
certificate status. At most one cert-validator can be configured
for each cert-validation type.
certificate-key-size
Specifies the number of bits in the key associated with this
certificate.
checksum
Specifies a cryptographic hash or checksum of the file contents
for use in verification of file integrity.
create-time
Specifies the time at which the file-object was created.
created-by
Specifies the user who originally created the file-object.
expiration-date
Specifies the date at which this certificate expires. Stored as a
POSIX time.
expiration-string
Specifies a string representation of the expiration date of the
certificate.
fingerprint
Displays the SHA-256 fingerprint of the certificate.
is-bundle
Specifies whether the certificate file is a bundle (that is,
whether it contains more than one certificate).
issuer
Specifies X509 information of the certificate's issuer. If the
cert is a bundle, this displays the issuer information for the
primary (first) cert in the bundle.
issuer-cert
Specifies the name of the issuer certificate for this certificate.
key-type
Specifies the type of cryptographic key associated with this
certificate.
last-update-time
Specifies the last time at which the file-object was
updated/modified.
mode Specifies the UNIX file permissions mode for the file associated
with this file-object as a numerical value.
revision
Specifies the latest revision of the file. The revision starts
with 1 and gets incremented on each update.
serial-number
Specifies the certificate's serial number.
size Specifies the size (in bytes) of the file associated with this
file object.
source-path [URL]
This attribute takes a URL, for example:
source-path http://cert-server/cert_store/certs/vs_132.crt
source-path https://cert-server/cert_store/certs/vs_132.crt
source-path
ftp://username:password@server/cert_store/certs/vs_132.crt
subject
Specifies X509 information of the certificate's subject. If the
cert is a bundle, this displays the subject information for the
primary (first) cert in the bundle.
subject-alternative-name
Specifies a standard X.509 extension as shown in RFC 2459.
updated-by
Specifies the user who last updated the file-object.
version
Specifies the X509 version of the certificate.
SEE ALSO
create, delete, edit, glob, list, ltm profile client-ssl, ltm profile
server-ssl, modify, regex, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2008-2013. All rights reserved.
BIG-IP 2017-05-05 sys file ssl-cert(1)