ADC CLI Commands

ssl-echConfig

The following operations can be performed on “ssl-echConfig”:

add rm show

add ssl echConfig

Add an echConfig with supported cipher, hpkekey, public name, configid and version.

Synopsis

add ssl echConfig -ECHcipher -hpkeKeyName -ECHPublicName -ECHconfigId [-version ]

Arguments

ECHconfigName The ECH config name configured.

ECHcipher The supported cipher suite that encrypts the client Hello Message.

hpkeKeyName The name of the configured HPKE key

ECHPublicName The public name of ech config means FQDN or any string

ECHconfigId The config id of the ech config. Minimum value: 0 Maximum value: 255

version The version of ECH for which this configuration is used. Default value: 65037 Minimum value: 0

Example

add echConfig ech_conf -echCipher AES128-GCM-HKDFSHA256 -hpkeKeyName hpke_new -ECHPublicName abc.com -ECHConfigId 1 -version 65037

rm ssl echConfig

Removes the specified HPKE key

Synopsis

rm ssl echConfig

Arguments

ECHconfigName Name of the ECHCONFIG.

Example

rm ssl echconfig k1

show ssl echConfig

Displays lists of all the ECHCONFIG added on the Citrix ADC.

Synopsis

show ssl echConfig []

Arguments

ECHconfigName Name of the ECHCONFIG for which to show detailed information.

Output

ECHcipher Name of the cipher name in ECH CONFIG

hpkeKeyName Name of the key in ECH CONFIG

version Version of ECH CONFIG

ECHPublicName Public name in ECH CONFIG

ECHconfigId config id of ECH CONFIG

stateflag devno count _nextgenAPIResource

Example

An example of output of ‘show ssl echconfig’ command is as shown below: sh ssl echconfig 1 SSL ECHCONFIG: 1)SSL ECHCONFIG Name: ech1

ssl-echConfig