Bug ID 842525: TMSH - Modifying sys httpd ssl-verify-client attribute to 'optional-no-ca' results in error

Last Modified: Apr 02, 2026

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4

Opened: Oct 23, 2019

Severity: 3-Major

Symptoms

Error is seen when configuring the ssl-verify-client to optional-no-ca via tmsh tmsh modify sys httpd ssl-verify-client optional-no-ca 01070920:3: Application error for confpp: AH00526: Syntax error on line 166 of /etc/httpd/conf.d/ssl.conf: SSLVerifyClient: Invalid argument 'optional-no-ca'

Impact

Unable to configure ssl-verify-client to optional-no-ca - impacts authentication

Conditions

Seen when configuring ssl-verify-client to optional-no-ca in httpd profile

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips