Class ProfileClientSsl

f5bigip.ltm.ProfileClientSsl Manages client SSL profiles on a BIG-IP

Example Usage

using Pulumi;
using F5BigIP = Pulumi.F5BigIP;

class MyStack : Stack
{
public MyStack()
{
    var test_ClientSsl = new F5BigIP.Ltm.ProfileClientSsl("test-ClientSsl", new F5BigIP.Ltm.ProfileClientSslArgs
    {
        Authenticate = "always",
        Ciphers = "DEFAULT",
        DefaultsFrom = "/Common/clientssl",
        Name = "/Common/test-ClientSsl",
        Partition = "Common",
    });
}

}

Inheritance

System.Object

Resource

CustomResource

ProfileClientSsl

Inherited Members

CustomResource.Id

Resource.GetResourceType()

Resource.GetResourceName()

Resource.Urn

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

System.Object.ReferenceEquals(System.Object, System.Object)

System.Object.ToString()

Namespace: Pulumi.F5BigIP.Ltm

Assembly: Pulumi.F5BigIP.dll

Syntax

public class ProfileClientSsl : CustomResource

Constructors

ProfileClientSsl(String, ProfileClientSslArgs, CustomResourceOptions)

Create a ProfileClientSsl resource with the given unique name, arguments, and options.

Declaration

public ProfileClientSsl(string name, ProfileClientSslArgs args, CustomResourceOptions options = null)

Parameters

Type	Name	Description
System.String	name	The unique name of the resource
ProfileClientSslArgs	args	The arguments used to populate this resource's properties
CustomResourceOptions	options	A bag of options that control this resource's behavior

Properties

AlertTimeout

Alert time out

Declaration

public Output<string> AlertTimeout { get; }

Property Value

Type	Description
Output<System.String>

AllowNonSsl

Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile

Declaration

public Output<string> AllowNonSsl { get; }

Property Value

Type	Description
Output<System.String>

Authenticate

Specifies the frequency of client authentication for an SSL session.When once,specifies that the system authenticates the client once for an SSL session. When always, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.

Declaration

public Output<string> Authenticate { get; }

Property Value

Type	Description
Output<System.String>

AuthenticateDepth

Specifies the maximum number of certificates to be traversed in a client certificate chain

Declaration

public Output<int> AuthenticateDepth { get; }

Property Value

Type	Description
Output<System.Int32>

CacheSize

Cache size (sessions).

Declaration

public Output<int> CacheSize { get; }

Property Value

Type	Description
Output<System.Int32>

CacheTimeout

Cache time out

Declaration

public Output<int> CacheTimeout { get; }

Property Value

Type	Description
Output<System.Int32>

CaFile

Client certificate file path. Default None.

Declaration

public Output<string> CaFile { get; }

Property Value

Type	Description
Output<System.String>

Cert

Specifies a cert name for use.

Declaration

public Output<string> Cert { get; }

Property Value

Type	Description
Output<System.String>

CertExtensionIncludes

Cert extension includes for ssl forward proxy

Declaration

public Output<ImmutableArray<string>> CertExtensionIncludes { get; }

Property Value

Type	Description
Output<System.Collections.Immutable.ImmutableArray<System.String>>

CertKeyChains

Declaration

public Output<ImmutableArray<ProfileClientSslCertKeyChain>> CertKeyChains { get; }

Property Value

Type	Description
Output<System.Collections.Immutable.ImmutableArray<ProfileClientSslCertKeyChain>>

CertLifeSpan

Life span of the certificate in days for ssl forward proxy

Declaration

public Output<int> CertLifeSpan { get; }

Property Value

Type	Description
Output<System.Int32>

CertLookupByIpaddrPort

Cert lookup by ip address and port enabled / disabled

Declaration

public Output<string> CertLookupByIpaddrPort { get; }

Property Value

Type	Description
Output<System.String>

Chain

Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional

Declaration

public Output<string> Chain { get; }

Property Value

Type	Description
Output<System.String>

Ciphers

Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.

Declaration

public Output<string> Ciphers { get; }

Property Value

Type	Description
Output<System.String>

ClientCertCa

client certificate name

Declaration

public Output<string> ClientCertCa { get; }

Property Value

Type	Description
Output<System.String>

CrlFile

Certificate revocation file name

Declaration

public Output<string> CrlFile { get; }

Property Value

Type	Description
Output<System.String>

DefaultsFrom

The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the clientssl parent on the Common partition.

Declaration

public Output<string> DefaultsFrom { get; }

Property Value

Type	Description
Output<System.String>

ForwardProxyBypassDefaultAction

Forward proxy bypass default action. (enabled / disabled)

Declaration

public Output<string> ForwardProxyBypassDefaultAction { get; }

Property Value

Type	Description
Output<System.String>

FullPath

full path of the profile

Declaration

public Output<string> FullPath { get; }

Property Value

Type	Description
Output<System.String>

Generation

generation

Declaration

public Output<int> Generation { get; }

Property Value

Type	Description
Output<System.Int32>

GenericAlert

Generic alerts enabled / disabled.

Declaration

public Output<string> GenericAlert { get; }

Property Value

Type	Description
Output<System.String>

HandshakeTimeout

Handshake time out (seconds)

Declaration

public Output<string> HandshakeTimeout { get; }

Property Value

Type	Description
Output<System.String>

InheritCertKeychain

Inherit cert key chain

Declaration

public Output<string> InheritCertKeychain { get; }

Property Value

Type	Description
Output<System.String>

Key

Contains a key name

Declaration

public Output<string> Key { get; }

Property Value

Type	Description
Output<System.String>

Mode

ModSSL Methods enabled / disabled. Default is disabled.

Declaration

public Output<string> Mode { get; }

Property Value

Type	Description
Output<System.String>

ModSslMethods

ModSSL Methods enabled / disabled. Default is disabled.

Declaration

public Output<string> ModSslMethods { get; }

Property Value

Type	Description
Output<System.String>

Name

Specifies the name of the profile. (type string)

Declaration

public Output<string> Name { get; }

Property Value

Type	Description
Output<System.String>

Partition

Device partition to manage resources on.

Declaration

public Output<string> Partition { get; }

Property Value

Type	Description
Output<System.String>

Passphrase

Client Certificate Constrained Delegation CA passphrase

Declaration

public Output<string> Passphrase { get; }

Property Value

Type	Description
Output<System.String>

PeerCertMode

Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.

Declaration

public Output<string> PeerCertMode { get; }

Property Value

Type	Description
Output<System.String>

ProxyCaCert

Proxy CA Cert

Declaration

public Output<string> ProxyCaCert { get; }

Property Value

Type	Description
Output<System.String>

ProxyCaKey

Proxy CA Key

Declaration

public Output<string> ProxyCaKey { get; }

Property Value

Type	Description
Output<System.String>

ProxyCaPassphrase

Proxy CA Passphrase

Declaration

public Output<string> ProxyCaPassphrase { get; }

Property Value

Type	Description
Output<System.String>

ProxySsl

Proxy SSL enabled / disabled. Default is disabled.

Declaration

public Output<string> ProxySsl { get; }

Property Value

Type	Description
Output<System.String>

ProxySslPassthrough

Proxy SSL passthrough enabled / disabled. Default is disabled.

Declaration

public Output<string> ProxySslPassthrough { get; }

Property Value

Type	Description
Output<System.String>

RenegotiatePeriod

Renogotiate Period (seconds)

Declaration

public Output<string> RenegotiatePeriod { get; }

Property Value

Type	Description
Output<System.String>

RenegotiateSize

Renogotiate Size

Declaration

public Output<string> RenegotiateSize { get; }

Property Value

Type	Description
Output<System.String>

Renegotiation

Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile

Declaration

public Output<string> Renegotiation { get; }

Property Value

Type	Description
Output<System.String>

RetainCertificate

When true, client certificate is retained in SSL session.

Declaration

public Output<string> RetainCertificate { get; }

Property Value

Type	Description
Output<System.String>

SecureRenegotiation

Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers

Declaration

public Output<string> SecureRenegotiation { get; }

Property Value

Type	Description
Output<System.String>

ServerName

Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.

Declaration

public Output<string> ServerName { get; }

Property Value

Type	Description
Output<System.String>

SessionMirroring

Session Mirroring (enabled / disabled)

Declaration

public Output<string> SessionMirroring { get; }

Property Value

Type	Description
Output<System.String>

SessionTicket

Session Ticket (enabled / disabled)

Declaration

public Output<string> SessionTicket { get; }

Property Value

Type	Description
Output<System.String>

SniDefault

Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.

Declaration

public Output<string> SniDefault { get; }

Property Value

Type	Description
Output<System.String>

SniRequire

Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile

Declaration

public Output<string> SniRequire { get; }

Property Value

Type	Description
Output<System.String>

SslForwardProxy

SSL forward Proxy (enabled / disabled)

Declaration

public Output<string> SslForwardProxy { get; }

Property Value

Type	Description
Output<System.String>

SslForwardProxyBypass

SSL forward Proxy Bypass (enabled / disabled)

Declaration

public Output<string> SslForwardProxyBypass { get; }

Property Value

Type	Description
Output<System.String>

SslSignHash

SSL sign hash (any, sha1, sha256, sha384)

Declaration

public Output<string> SslSignHash { get; }

Property Value

Type	Description
Output<System.String>

StrictResume

Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.

Declaration

public Output<string> StrictResume { get; }

Property Value

Type	Description
Output<System.String>

TmOptions

Declaration

public Output<ImmutableArray<string>> TmOptions { get; }

Property Value

Type	Description
Output<System.Collections.Immutable.ImmutableArray<System.String>>

UncleanShutdown

Unclean Shutdown (enabled / disabled)

Declaration

public Output<string> UncleanShutdown { get; }

Property Value

Type	Description
Output<System.String>

Methods

Get(String, Input<String>, ProfileClientSslState, CustomResourceOptions)

Get an existing ProfileClientSsl resource's state with the given name, ID, and optional extra properties used to qualify the lookup.

Declaration

public static ProfileClientSsl Get(string name, Input<string> id, ProfileClientSslState state = null, CustomResourceOptions options = null)

Parameters

Type	Name	Description
System.String	name	The unique name of the resulting resource.
Input<System.String>	id	The unique provider ID of the resource to lookup.
ProfileClientSslState	state	Any extra arguments used during the lookup.
CustomResourceOptions	options	A bag of options that control this resource's behavior

Returns

Type	Description
ProfileClientSsl