Forum Discussion

Michel_van_der_'s avatar
Michel_van_der_
Icon for Nimbostratus rankNimbostratus
Jun 13, 2003

Equivalent of 'serverssl server cert ignore' in proxy?

I have a proxy defintion, and I want to do the equivalent of: 

bigpipe proxy 1.2.3.4:443 serverssl server cert ignore
It looks like
ITCMLocalLB.Proxy.set_server_certificate_mask
might be the right iControl call (I could be wrong...), but the description of the mask in the docs (The mask specifying how server certificate is handled) is not too informative. Is this the right call, and where do I find the definition of the what the mask does?
dev
devops
iControl
v4
  • AlSjogren_12704's avatar
    AlSjogren_12704
    Historic F5 Account
    Jun 13, 2003
    set_server_certificate_mask is the correct method. The state you want is PROXY_SERVER_CERTIFICATE_IGNORED.

     

     

    Al
  • Michel_van_der_'s avatar
    Michel_van_der_
    Icon for Nimbostratus rankNimbostratus
    Jun 13, 2003
    Thanks. As an FYI, turns out that particular info is not in the wsdl files, or

     

    in the docs. I did find it in the idl files (I needed the value for my perl

     

    implementation...).

     

     

    PROXY_SERVER_CERTIFICATE_IGNORED = 0

     

    PROXY_SERVER_CERTIFICATE_REQUIRED = 2
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Jun 17, 2003
    These are defined as constants in the idl and we do not currently have mapping for them in the WSDL. They are included in the documentation though. They are located in the help page for ITCMLocalLB::Proxy. You can navigate there by the following tree in the help

     

     

    API Reference->ITCM->ITCMLocalLB->Proxy