epaalx
Sep 21, 2017Cirrus
Inherit cert-key-chain and cipher from another client-ssl profile in existing profile
I have a populated client-ssl profile which I don't want to delete (because it's referenced by production VSs) but I want to substitute all of its contents (particularly, "cert-key-chain" and "cipher" attributes) with those of another profile (which I expect to do using "defaults-from" attribute).
I've attempted:
modify /ltm profile client-ssl clientssl_vshttpserver_2480_2s defaults-from QuoVadis_wildcard_XX_edu_au2 cert-key-chain delete {QuoVadis_wildcard_XX_edu_au}
but get error:
010717e2:3: Client SSL profile must have at least one set of certificate/key.
I can do it via Configuration Utility (by unchecking "Certificate Key Chain" and "Ciphers" sections), but (for logistical reasons) I need to achieve this task using TMSH.
Advice?