| setsslprofile_allowextendedmastersecret |
Use this method to set when set to YES, attempt to use the TLS Extended Master Secret (EMS, as described in RFC 7627) when negotiating TLS 1.0, TLS 1.1 and TLS 1.2 connection parameters. EMS must be supported by both the TLS client and server in order to be enabled during a handshake. This setting applies to both frontend and backend SSL profiles. |
Syntax |
Parameters |
name |
Name for the SSL profile. Must begin with an ASCII alphanumeric or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. Cannot be changed after the profile is created. This is mandatory parameter. |
allowextendedmastersecret |
When set to YES, attempt to use the TLS Extended Master Secret (EMS, as
described in RFC 7627) when negotiating TLS 1.0, TLS 1.1 and TLS 1.2
connection parameters. EMS must be supported by both the TLS client and server
in order to be enabled during a handshake. This setting applies to both
frontend and backend SSL profiles. Default value = NO. Possible Values : YES, NO. |
Return Value |
Returns simpleResult |
See Also |