/config/ssl/profileBase/<base_name>/protocolDisableList

Use

Use to set which SSL protocols are disabled. The protocol disable list applies to both SSL termination and initiation.

To provide maximum security against known security vulnerabilities, SSLv2 and SSLv3 are disabled by default.

F5® LineRate® supports the following protocols: SSLv2, SSLv3, and TLSv1.

Parameters

base_name: Name of profile base object

Data Key

The data key contains the colon-separated list of disabled protocols.

Note: When the default key is set to true, it means the object is set to its default. In this case, the system works as follows:

  • On a PUT operation, the system ignores the data key. (Applicable only to /config nodes.)
  • On a GET operation, the response only contains “default”: True and does not contain the data key.
  • If the object has a base, it inherits its setting from its base.

See [Setting Objects to Their Default](https://docs.lineratesystems.com/087Rel ease_2.6/250REST_API_Reference_Guide/000Getting_Started_with_the_REST_API/300U nderstanding_the_REST_Hierarchy#Setting_Objects_to_Their_Default_(Default_Key) ).

Data Type

string

Default Data Value

“”

An object uses the default data value when one of the following is true:

  • For objects without bases–When the object’s default key is true.
  • For objects with bases–When the object’s default key is true, and when the default key is true for all of the object’s bases.

Default Allowed

True

Request Methods

GET, PUT

Examples

GET

curl -b cookie.jar -k https://10.1.2.3:8443/lrs/api/v1.0/config/ssl/profileBas e/spb-01/protocolDisableList

GET Response

{"/config/ssl/profileBase/spb-01/protocolDisableList": {"default": True,
                                                         "defaultAllowed": True,
                                                         "deleteAllowed": False,
                                                         "numChildren": 0,
                                                         "redacted": False,
                                                         "sensitive": False,
                                                         "type": "string"},
 "httpResponseCode": 200,
 "recurse": False,
 "requestPath": "/config/ssl/profileBase/spb-01/protocolDisableList"}

PUT

curl -b cookie.jar –data @data.json -k -H “Content-Type: application/json” -X PUT https://10.1.2.3:8443/lrs/api/v1.0/config/ssl/profileBase/spb-01/protocolD isableList

PUT Response

{"httpResponseCode": 200,
  "requestPath": "/config/ssl/profileBase/spb-01/protocolDisableList",
  "recurse":false}
  1. /config/ssl/profileBase/<base_name>/protocolDisableList 1. Parameters 2. Data Key
    1. Data Type
    2. Default Data Value 3. Default Allowed 4. Request Methods 5. Related 6. Examples