close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

ssl (Services)

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

ssl {
    initiation {
        profile profile-name {
            actions { 
                crl {
                    disable;
                    if-not-present (allow | drop); 
                    ignore-hold-instruction-code;
                }
                ignore-server-auth-failure;
            }
            client-certificate; 
            custom-ciphers [cipher];
            enable-flow-tracing;
            enable-session-cache;
            preferred-ciphers (custom | medium | strong | weak);
            protocol-version (all | tls1  | tls11 | tls12);
            trusted-ca (all | [ca-profile] );
        }
    }
    proxy {
        global-config {
            session-cache-timeout seconds;
        }
        profile profile-name {
            actions {
                crl {
                    disable;
                    if-not-present (allow | drop); 
                    ignore-hold-instruction-code;
                }
                disable-session-resumption;
                ignore-server-auth-failure;
                log {
                    all;
                    errors;
                    info;
                    sessions-allowed;
                    sessions-dropped;
                    sessions-ignored;
                    sessions-whitelisted;
                    warning;
                }
                renegotiation {
                    (allow | allow-secure | drop); 
                }
            }
            custom-ciphers [cipher];
            enable-flow-tracing;
             preferred-ciphers (custom | medium | strong | weak);
            root-ca root-certificate;
            trusted-ca (all | [ca-profile] );
            whitelist [global-address-book-addresses];
        }
    }
    termination {
        profile profile-name {
            custom-ciphers [cipher];
            enable-flow-tracing;
            enable-session-cache;
            preferred-ciphers (custom | medium | strong | weak);
            protocol-version (all | tls1  | tls11 | tls12);
            server-certificate certificate-identifier;
        }
    }
    traceoptions {
        file {
            filename;
            files number;
            match regular-expression;
            (no-world-readable | world-readable);
            size maximum-file-size;
        }
        flag flag; 
        level [brief | detail | extensive | verbose];
        no-remote-trace;
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit services]

Description

Specify the configuration for Secure Socket Layer (SSL) support service. This statement is supported on the SRX1500, SRX4100, SRX4200, SRX5400, SRX5600, and SRX5800 devices and vSRX Virtual Firewall.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1X44-D10. The crl statement is supported from 15.1X49-D30. The protocol-version statement is updated to include tls11 and tls12 from Junos OS Release 15.1X49-D30.

arrow_backward PREVIOUS ssl-proxy (Application Services)

NEXT arrow_forward ssl-termination-profile

Junos CLI Reference

ON THIS PAGE

ssl (Services)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

ssl (Services)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch