ADC CLI Commands

ssl-cacertbundle

The following operations can be performed on “ssl-cacertbundle”:

add rm show

add ssl cacertbundle

Adds a cacertbundle. After it is bound to a vserver/service/servicegroup, it is used for certificate authentication.

Synopsis

add ssl cacertbundle -bundlefile

Arguments

cacertbundleName Name given to the CA certbundle. The name will be used for bind/unbind/update operations. Must begin with an ASCII alphanumeric or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my file” or ‘my file’).

bundlefile Name of and, optionally, path to the X509 CA certificate bundle file that is used to form cacertbundle entity. The CA certificate bundle file should be present on the appliance’s hard-disk drive or solid-state drive. /nsconfig/ssl/ is the default path. The CA certificate bundle file consists of list of certificates.

Example

1) add ssl cacertbundle cs1 -bundlefile /nsconfig/ssl/ca_cacert_bundle.pem

rm ssl cacertbundle

Removes the specified CA certbundle.

Synopsis

rm ssl cacertbundle

Arguments

cacertbundleName Name given to the CA certbundle. The name will be used for bind/unbind/update operations. Must begin with an ASCII alphanumeric or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my file” or ‘my file’).

Example

rm ssl cacertbundle bundle1

show ssl cacertbundle

Displays information about all configured cacertbundle’s on the appliance, or displays detailed information about the specified CA certbundle.

Synopsis

show ssl cacertbundle []

Arguments

cacertbundleName Name given to the CA certbundle. The name will be used for bind/unbind/update operations. Must begin with an ASCII alphanumeric or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my file” or ‘my file’).

Output

bundlefile Name of and, optionally, path to the X509 CA certificate bundle file that is used to form cacertbundle entity. The CA certificate bundle file should be present on the appliance’s hard-disk drive or solid-state drive. /nsconfig/ssl/ is the default path. The CA certificate bundle file consists of list of certificates.

serverName Vserver/Service/Servicegroup name to which the cacertbundle is bound.

subject Subject name.

serial Serial number.

issuer Issuer name.

publickey Public key algorithm.

publickey Public key algorithm.

publickeysize Size of the public key.

sandns Subject Alternative Name (SAN) is an extension to X.509 that allows various values to be associated with a security certificate using a subjectAltName field. These values are called “Subject Alternative Names” (SAN). This field is for DNS names

sanipadd Subject Alternative Name (SAN) is an extension to X.509 that allows various values to be associated with a security certificate using a subjectAltName field. These values are called “Subject Alternative Names” (SAN). This field is for IP address

sandns Subject Alternative Name (SAN) is an extension to X.509 that allows various values to be associated with a security certificate using a subjectAltName field. These values are called “Subject Alternative Names” (SAN). This field is for DNS names

sanipadd Subject Alternative Name (SAN) is an extension to X.509 that allows various values to be associated with a security certificate using a subjectAltName field. These values are called “Subject Alternative Names” (SAN). This field is for IP address

clientCertNotBefore Not-Before date.

clientCertNotAfter Not-After date.

daysToExpiration Days remaining for the certificate to expire.

signatureAlg Signature algorithm.

status Status of the certificate.

stateflag CaCertBundleDigest Stores the digest of a CA certificate bundle file

devno count _nextgenAPIResource

Example

1) show ssl cacertbundle cs1 2) show ssl cacertbundle

ssl-cacertbundle