For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 14, 2016

iApp Config updates not applying

Morning all...   Been a while since I've posted on here... :)   I've got a couple of pairs of 11.6.0 F5 devices, which appear to have developed a rather strange issue with applying iApp templ...
application delivery
iApps
LTM
mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Oct 14, 2016

Hi Gavin, if you manually disable SSLv3 on the profile via the tmsh command line, does the change take immediately? iApps generally use tmsh to do their work, so if you still see the issue, it's not an iApp problem.

 

Fred_Slater_856's avatar
Fred_Slater_856
Historic F5 Account
Oct 14, 2016
This minimal iapp proves that it works as an iapp template:
implementation {
    iapp::conf create ltm profile client-ssl child defaults-from $::x__parent
}
presentation {
    section x {
        choice parent tcl { 
            iapp::get_items ltm profile client-ssl
        }
    }
}
With this template, I was able to create a profile based on clientssl, and then reconfigure with a parent that contains options { no_sslv3 }.  The new iapp-created profile also had no_sslv3.