bigip_ltm_profile_server_ssl.md

bigip_ltm_profile_server_ssl

back

Index

• Example Usage
• Variables
• Resource
• Outputs

Terraform

terraform {
  required_providers {
    bigip = ">= 1.8.0"
  }
}

top

Example Usage

module "bigip_ltm_profile_server_ssl" {
  source = "./modules/bigip/r/bigip_ltm_profile_server_ssl"

  # alert_timeout - (optional) is a type of string
  alert_timeout = null
  # authenticate - (optional) is a type of string
  authenticate = null
  # authenticate_depth - (optional) is a type of number
  authenticate_depth = null
  # c3d_ca_cert - (optional) is a type of string
  c3d_ca_cert = null
  # c3d_ca_key - (optional) is a type of string
  c3d_ca_key = null
  # c3d_ca_passphrase - (optional) is a type of string
  c3d_ca_passphrase = null
  # c3d_cert_extension_custom_oids - (optional) is a type of list of string
  c3d_cert_extension_custom_oids = []
  # c3d_cert_extension_includes - (optional) is a type of list of string
  c3d_cert_extension_includes = []
  # c3d_cert_lifespan - (optional) is a type of number
  c3d_cert_lifespan = null
  # c3d_certificate_extensions - (optional) is a type of string
  c3d_certificate_extensions = null
  # ca_file - (optional) is a type of string
  ca_file = null
  # cache_size - (optional) is a type of number
  cache_size = null
  # cache_timeout - (optional) is a type of number
  cache_timeout = null
  # cert - (optional) is a type of string
  cert = null
  # chain - (optional) is a type of string
  chain = null
  # ciphers - (optional) is a type of string
  ciphers = null
  # defaults_from - (optional) is a type of string
  defaults_from = null
  # expire_cert_response_control - (optional) is a type of string
  expire_cert_response_control = null
  # full_path - (optional) is a type of string
  full_path = null
  # generation - (optional) is a type of number
  generation = null
  # generic_alert - (optional) is a type of string
  generic_alert = null
  # handshake_timeout - (optional) is a type of string
  handshake_timeout = null
  # key - (optional) is a type of string
  key = null
  # mod_ssl_methods - (optional) is a type of string
  mod_ssl_methods = null
  # mode - (optional) is a type of string
  mode = null
  # name - (required) is a type of string
  name = null
  # partition - (optional) is a type of string
  partition = null
  # passphrase - (optional) is a type of string
  passphrase = null
  # peer_cert_mode - (optional) is a type of string
  peer_cert_mode = null
  # proxy_ca_cert - (optional) is a type of string
  proxy_ca_cert = null
  # proxy_ca_key - (optional) is a type of string
  proxy_ca_key = null
  # proxy_ssl - (optional) is a type of string
  proxy_ssl = null
  # renegotiate_period - (optional) is a type of string
  renegotiate_period = null
  # renegotiate_size - (optional) is a type of string
  renegotiate_size = null
  # renegotiation - (optional) is a type of string
  renegotiation = null
  # retain_certificate - (optional) is a type of string
  retain_certificate = null
  # secure_renegotiation - (optional) is a type of string
  secure_renegotiation = null
  # server_name - (optional) is a type of string
  server_name = null
  # session_mirroring - (optional) is a type of string
  session_mirroring = null
  # session_ticket - (optional) is a type of string
  session_ticket = null
  # sni_default - (optional) is a type of string
  sni_default = null
  # sni_require - (optional) is a type of string
  sni_require = null
  # ssl_c3d - (optional) is a type of string
  ssl_c3d = null
  # ssl_forward_proxy - (optional) is a type of string
  ssl_forward_proxy = null
  # ssl_forward_proxy_bypass - (optional) is a type of string
  ssl_forward_proxy_bypass = null
  # ssl_sign_hash - (optional) is a type of string
  ssl_sign_hash = null
  # strict_resume - (optional) is a type of string
  strict_resume = null
  # tm_options - (optional) is a type of set of string
  tm_options = []
  # unclean_shutdown - (optional) is a type of string
  unclean_shutdown = null
  # untrusted_cert_response_control - (optional) is a type of string
  untrusted_cert_response_control = null
}

top

Variables

variable "alert_timeout" {
  description = "(optional) - Alert time out"
  type        = string
  default     = null
}

variable "authenticate" {
  description = "(optional) - Server authentication once / always (default is once)."
  type        = string
  default     = null
}

variable "authenticate_depth" {
  description = "(optional) - Client certificate chain traversal depth.  Default 9."
  type        = number
  default     = null
}

variable "c3d_ca_cert" {
  description = "(optional) - CA Certificate. Default none."
  type        = string
  default     = null
}

variable "c3d_ca_key" {
  description = "(optional) - CA Key.  Default none."
  type        = string
  default     = null
}

variable "c3d_ca_passphrase" {
  description = "(optional) - CA Passphrase. Default"
  type        = string
  default     = null
}

variable "c3d_cert_extension_custom_oids" {
  description = "(optional) - Certificate Extensions List.  Default"
  type        = list(string)
  default     = null
}

variable "c3d_cert_extension_includes" {
  description = "(optional) - Certificate Extensions Includes. Default Extensions List"
  type        = list(string)
  default     = null
}

variable "c3d_cert_lifespan" {
  description = "(optional) - Certificate Lifespan.  Default"
  type        = number
  default     = null
}

variable "c3d_certificate_extensions" {
  description = "(optional) - CA Passphrase. Default enabled"
  type        = string
  default     = null
}

variable "ca_file" {
  description = "(optional) - Client certificate file path.  Default None."
  type        = string
  default     = null
}

variable "cache_size" {
  description = "(optional) - Cache size (sessions)."
  type        = number
  default     = null
}

variable "cache_timeout" {
  description = "(optional) - Cache time out"
  type        = number
  default     = null
}

variable "cert" {
  description = "(optional) - Name of the server certificate."
  type        = string
  default     = null
}

variable "chain" {
  description = "(optional) - Client certificate chain name."
  type        = string
  default     = null
}

variable "ciphers" {
  description = "(optional) - BigIP Cipher string."
  type        = string
  default     = null
}

variable "defaults_from" {
  description = "(optional) - Profile name that this profile defaults from."
  type        = string
  default     = null
}

variable "expire_cert_response_control" {
  description = "(optional) - Response if the cert is expired (drop / ignore). "
  type        = string
  default     = null
}

variable "full_path" {
  description = "(optional) - full path of the profile"
  type        = string
  default     = null
}

variable "generation" {
  description = "(optional) - generation"
  type        = number
  default     = null
}

variable "generic_alert" {
  description = "(optional) - Generic alerts enabled / disabled."
  type        = string
  default     = null
}

variable "handshake_timeout" {
  description = "(optional) - Handshake time out (seconds)"
  type        = string
  default     = null
}

variable "key" {
  description = "(optional) - Name of the Serer SSL profile key"
  type        = string
  default     = null
}

variable "mod_ssl_methods" {
  description = "(optional) - ModSSL Methods enabled / disabled.  Default is disabled."
  type        = string
  default     = null
}

variable "mode" {
  description = "(optional) - ModSSL Methods enabled / disabled.  Default is disabled."
  type        = string
  default     = null
}

variable "name" {
  description = "(required) - Name of the Ssl Profile"
  type        = string
}

variable "partition" {
  description = "(optional) - name of partition"
  type        = string
  default     = null
}

variable "passphrase" {
  description = "(optional) - Client Certificate Constrained Delegation CA passphrase"
  type        = string
  default     = null
}

variable "peer_cert_mode" {
  description = "(optional) - Peer Cert Mode"
  type        = string
  default     = null
}

variable "proxy_ca_cert" {
  description = "(optional) - Proxy CA Cert"
  type        = string
  default     = null
}

variable "proxy_ca_key" {
  description = "(optional) - Proxy CA Key"
  type        = string
  default     = null
}

variable "proxy_ssl" {
  description = "(optional) - Proxy SSL enabled / disabled.  Default is disabled."
  type        = string
  default     = null
}

variable "renegotiate_period" {
  description = "(optional) - Renogotiate Period (seconds)"
  type        = string
  default     = null
}

variable "renegotiate_size" {
  description = "(optional) - Renogotiate Size"
  type        = string
  default     = null
}

variable "renegotiation" {
  description = "(optional) - Renegotiation (enabled / disabled)"
  type        = string
  default     = null
}

variable "retain_certificate" {
  description = "(optional) - Retain certificate."
  type        = string
  default     = null
}

variable "secure_renegotiation" {
  description = "(optional) - Secure reneogotiaton (request / require / require-strict)."
  type        = string
  default     = null
}

variable "server_name" {
  description = "(optional) - Server name"
  type        = string
  default     = null
}

variable "session_mirroring" {
  description = "(optional) - Session Mirroring (enabled / disabled)"
  type        = string
  default     = null
}

variable "session_ticket" {
  description = "(optional) - Session Ticket (enabled / disabled)"
  type        = string
  default     = null
}

variable "sni_default" {
  description = "(optional) - SNI Default (true / false)"
  type        = string
  default     = null
}

variable "sni_require" {
  description = "(optional) - SNI Require (true / false)"
  type        = string
  default     = null
}

variable "ssl_c3d" {
  description = "(optional) - Client Certificate Constrained Delegation. Default disabled"
  type        = string
  default     = null
}

variable "ssl_forward_proxy" {
  description = "(optional) - SSL forward Proxy (enabled / disabled)"
  type        = string
  default     = null
}

variable "ssl_forward_proxy_bypass" {
  description = "(optional) - SSL forward Proxy Bypass (enabled / disabled)"
  type        = string
  default     = null
}

variable "ssl_sign_hash" {
  description = "(optional) - SSL sign hash (any, sha1, sha256, sha384)"
  type        = string
  default     = null
}

variable "strict_resume" {
  description = "(optional) - Strict Resume (enabled / disabled)"
  type        = string
  default     = null
}

variable "tm_options" {
  description = "(optional)"
  type        = set(string)
  default     = null
}

variable "unclean_shutdown" {
  description = "(optional) - Unclean Shutdown (enabled / disabled)"
  type        = string
  default     = null
}

variable "untrusted_cert_response_control" {
  description = "(optional) - Unclean Shutdown (drop / ignore)"
  type        = string
  default     = null
}

top

Resource

resource "bigip_ltm_profile_server_ssl" "this" {
  # alert_timeout - (optional) is a type of string
  alert_timeout = var.alert_timeout
  # authenticate - (optional) is a type of string
  authenticate = var.authenticate
  # authenticate_depth - (optional) is a type of number
  authenticate_depth = var.authenticate_depth
  # c3d_ca_cert - (optional) is a type of string
  c3d_ca_cert = var.c3d_ca_cert
  # c3d_ca_key - (optional) is a type of string
  c3d_ca_key = var.c3d_ca_key
  # c3d_ca_passphrase - (optional) is a type of string
  c3d_ca_passphrase = var.c3d_ca_passphrase
  # c3d_cert_extension_custom_oids - (optional) is a type of list of string
  c3d_cert_extension_custom_oids = var.c3d_cert_extension_custom_oids
  # c3d_cert_extension_includes - (optional) is a type of list of string
  c3d_cert_extension_includes = var.c3d_cert_extension_includes
  # c3d_cert_lifespan - (optional) is a type of number
  c3d_cert_lifespan = var.c3d_cert_lifespan
  # c3d_certificate_extensions - (optional) is a type of string
  c3d_certificate_extensions = var.c3d_certificate_extensions
  # ca_file - (optional) is a type of string
  ca_file = var.ca_file
  # cache_size - (optional) is a type of number
  cache_size = var.cache_size
  # cache_timeout - (optional) is a type of number
  cache_timeout = var.cache_timeout
  # cert - (optional) is a type of string
  cert = var.cert
  # chain - (optional) is a type of string
  chain = var.chain
  # ciphers - (optional) is a type of string
  ciphers = var.ciphers
  # defaults_from - (optional) is a type of string
  defaults_from = var.defaults_from
  # expire_cert_response_control - (optional) is a type of string
  expire_cert_response_control = var.expire_cert_response_control
  # full_path - (optional) is a type of string
  full_path = var.full_path
  # generation - (optional) is a type of number
  generation = var.generation
  # generic_alert - (optional) is a type of string
  generic_alert = var.generic_alert
  # handshake_timeout - (optional) is a type of string
  handshake_timeout = var.handshake_timeout
  # key - (optional) is a type of string
  key = var.key
  # mod_ssl_methods - (optional) is a type of string
  mod_ssl_methods = var.mod_ssl_methods
  # mode - (optional) is a type of string
  mode = var.mode
  # name - (required) is a type of string
  name = var.name
  # partition - (optional) is a type of string
  partition = var.partition
  # passphrase - (optional) is a type of string
  passphrase = var.passphrase
  # peer_cert_mode - (optional) is a type of string
  peer_cert_mode = var.peer_cert_mode
  # proxy_ca_cert - (optional) is a type of string
  proxy_ca_cert = var.proxy_ca_cert
  # proxy_ca_key - (optional) is a type of string
  proxy_ca_key = var.proxy_ca_key
  # proxy_ssl - (optional) is a type of string
  proxy_ssl = var.proxy_ssl
  # renegotiate_period - (optional) is a type of string
  renegotiate_period = var.renegotiate_period
  # renegotiate_size - (optional) is a type of string
  renegotiate_size = var.renegotiate_size
  # renegotiation - (optional) is a type of string
  renegotiation = var.renegotiation
  # retain_certificate - (optional) is a type of string
  retain_certificate = var.retain_certificate
  # secure_renegotiation - (optional) is a type of string
  secure_renegotiation = var.secure_renegotiation
  # server_name - (optional) is a type of string
  server_name = var.server_name
  # session_mirroring - (optional) is a type of string
  session_mirroring = var.session_mirroring
  # session_ticket - (optional) is a type of string
  session_ticket = var.session_ticket
  # sni_default - (optional) is a type of string
  sni_default = var.sni_default
  # sni_require - (optional) is a type of string
  sni_require = var.sni_require
  # ssl_c3d - (optional) is a type of string
  ssl_c3d = var.ssl_c3d
  # ssl_forward_proxy - (optional) is a type of string
  ssl_forward_proxy = var.ssl_forward_proxy
  # ssl_forward_proxy_bypass - (optional) is a type of string
  ssl_forward_proxy_bypass = var.ssl_forward_proxy_bypass
  # ssl_sign_hash - (optional) is a type of string
  ssl_sign_hash = var.ssl_sign_hash
  # strict_resume - (optional) is a type of string
  strict_resume = var.strict_resume
  # tm_options - (optional) is a type of set of string
  tm_options = var.tm_options
  # unclean_shutdown - (optional) is a type of string
  unclean_shutdown = var.unclean_shutdown
  # untrusted_cert_response_control - (optional) is a type of string
  untrusted_cert_response_control = var.untrusted_cert_response_control
}

top

Outputs

output "alert_timeout" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.alert_timeout
}

output "authenticate" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.authenticate
}

output "authenticate_depth" {
  description = "returns a number"
  value       = bigip_ltm_profile_server_ssl.this.authenticate_depth
}

output "c3d_ca_passphrase" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.c3d_ca_passphrase
}

output "c3d_cert_lifespan" {
  description = "returns a number"
  value       = bigip_ltm_profile_server_ssl.this.c3d_cert_lifespan
}

output "c3d_certificate_extensions" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.c3d_certificate_extensions
}

output "ca_file" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.ca_file
}

output "cache_size" {
  description = "returns a number"
  value       = bigip_ltm_profile_server_ssl.this.cache_size
}

output "cache_timeout" {
  description = "returns a number"
  value       = bigip_ltm_profile_server_ssl.this.cache_timeout
}

output "cert" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.cert
}

output "chain" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.chain
}

output "ciphers" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.ciphers
}

output "expire_cert_response_control" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.expire_cert_response_control
}

output "full_path" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.full_path
}

output "generation" {
  description = "returns a number"
  value       = bigip_ltm_profile_server_ssl.this.generation
}

output "generic_alert" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.generic_alert
}

output "handshake_timeout" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.handshake_timeout
}

output "id" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.id
}

output "key" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.key
}

output "mod_ssl_methods" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.mod_ssl_methods
}

output "mode" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.mode
}

output "partition" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.partition
}

output "passphrase" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.passphrase
}

output "peer_cert_mode" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.peer_cert_mode
}

output "proxy_ca_cert" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.proxy_ca_cert
}

output "proxy_ca_key" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.proxy_ca_key
}

output "proxy_ssl" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.proxy_ssl
}

output "renegotiate_period" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.renegotiate_period
}

output "renegotiate_size" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.renegotiate_size
}

output "renegotiation" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.renegotiation
}

output "retain_certificate" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.retain_certificate
}

output "secure_renegotiation" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.secure_renegotiation
}

output "server_name" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.server_name
}

output "session_mirroring" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.session_mirroring
}

output "session_ticket" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.session_ticket
}

output "sni_default" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.sni_default
}

output "sni_require" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.sni_require
}

output "ssl_forward_proxy" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.ssl_forward_proxy
}

output "ssl_forward_proxy_bypass" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.ssl_forward_proxy_bypass
}

output "ssl_sign_hash" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.ssl_sign_hash
}

output "strict_resume" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.strict_resume
}

output "tm_options" {
  description = "returns a set of string"
  value       = bigip_ltm_profile_server_ssl.this.tm_options
}

output "unclean_shutdown" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.unclean_shutdown
}

output "untrusted_cert_response_control" {
  description = "returns a string"
  value       = bigip_ltm_profile_server_ssl.this.untrusted_cert_response_control
}

output "this" {
  value = bigip_ltm_profile_server_ssl.this
}

top