Adds bigip_profile_client_ssl module (#33844)

This module can be used to manage client ssl profiles on a BIG-IP
2026-05-07 05:42:50 +00:00 · 2017-12-12 19:54:43 -08:00
parent 155f36bbd8
commit cb026bb660
3 changed files with 782 additions and 0 deletions
--- a/test/units/modules/network/f5/fixtures/load_ltm_profile_clientssl.json
+++ b/test/units/modules/network/f5/fixtures/load_ltm_profile_clientssl.json
@@ -0,0 +1,103 @@
+{
+    "kind": "tm:ltm:profile:client-ssl:client-sslstate",
+    "name": "foo",
+    "partition": "Common",
+    "fullPath": "/Common/foo",
+    "generation": 351,
+    "selfLink": "https://localhost/mgmt/tm/ltm/profile/client-ssl/~Common~foo?ver=13.0.0",
+    "alertTimeout": "indefinite",
+    "allowDynamicRecordSizing": "disabled",
+    "allowExpiredCrl": "disabled",
+    "allowNonSsl": "disabled",
+    "appService": "none",
+    "authenticate": "once",
+    "authenticateDepth": 9,
+    "bypassOnClientCertFail": "disabled",
+    "bypassOnHandshakeAlert": "disabled",
+    "caFile": "none",
+    "cacheSize": 262144,
+    "cacheTimeout": 3600,
+    "cert": "/Common/default.crt",
+    "certReference": {
+        "link": "https://localhost/mgmt/tm/sys/file/ssl-cert/~Common~default.crt?ver=13.0.0"
+    },
+    "certExtensionIncludes": [
+        "basic-constraints",
+        "subject-alternative-name"
+    ],
+    "certLifespan": 30,
+    "certLookupByIpaddrPort": "disabled",
+    "chain": "none",
+    "cipherGroup": "none",
+    "ciphers": "DEFAULT",
+    "clientCertCa": "none",
+    "crlFile": "none",
+    "defaultsFrom": "/Common/clientssl",
+    "defaultsFromReference": {
+        "link": "https://localhost/mgmt/tm/ltm/profile/client-ssl/~Common~clientssl?ver=13.0.0"
+    },
+    "description": "none",
+    "destinationIpBlacklist": "none",
+    "destinationIpWhitelist": "none",
+    "forwardProxyBypassDefaultAction": "intercept",
+    "genericAlert": "enabled",
+    "handshakeTimeout": "10",
+    "hostnameBlacklist": "none",
+    "hostnameWhitelist": "none",
+    "inheritCertkeychain": "true",
+    "key": "/Common/default.key",
+    "keyReference": {
+        "link": "https://localhost/mgmt/tm/sys/file/ssl-key/~Common~default.key?ver=13.0.0"
+    },
+    "maxActiveHandshakes": "indefinite",
+    "maxAggregateRenegotiationPerMinute": "indefinite",
+    "maxRenegotiationsPerMinute": 5,
+    "maximumRecordSize": 16384,
+    "modSslMethods": "disabled",
+    "mode": "enabled",
+    "notifyCertStatusToVirtualServer": "disabled",
+    "ocspStapling": "disabled",
+    "tmOptions": [
+        "dont-insert-empty-fragments"
+    ],
+    "peerCertMode": "ignore",
+    "peerNoRenegotiateTimeout": "10",
+    "proxyCaCert": "none",
+    "proxyCaKey": "none",
+    "proxySsl": "disabled",
+    "proxySslPassthrough": "disabled",
+    "renegotiateMaxRecordDelay": "indefinite",
+    "renegotiatePeriod": "indefinite",
+    "renegotiateSize": "indefinite",
+    "renegotiation": "enabled",
+    "retainCertificate": "true",
+    "secureRenegotiation": "require",
+    "serverName": "none",
+    "sessionMirroring": "disabled",
+    "sessionTicket": "disabled",
+    "sessionTicketTimeout": 0,
+    "sniDefault": "false",
+    "sniRequire": "false",
+    "sourceIpBlacklist": "none",
+    "sourceIpWhitelist": "none",
+    "sslForwardProxy": "disabled",
+    "sslForwardProxyBypass": "disabled",
+    "sslSignHash": "any",
+    "strictResume": "disabled",
+    "uncleanShutdown": "enabled",
+    "certKeyChain": [
+        {
+            "name": "default",
+            "appService": "none",
+            "cert": "/Common/default.crt",
+            "certReference": {
+                "link": "https://localhost/mgmt/tm/sys/file/ssl-cert/~Common~default.crt?ver=13.0.0"
+            },
+            "chain": "none",
+            "key": "/Common/default.key",
+            "keyReference": {
+                "link": "https://localhost/mgmt/tm/sys/file/ssl-key/~Common~default.key?ver=13.0.0"
+            }
+        }
+    ]
+}