For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mihaic's avatar
Dec 14, 2023
Solved

need some help with a AS3 declaration

I have the declaration below. I get  "│ Error: posting as3 config failed for tenants:(Tenant_01) with error: Tenant Creation failed" I am trying to create 2 virtual servers one HTTP and one HTTPS t...
  • Nikoolayy1's avatar
    Dec 14, 2023

    See the article below of how to declare objects in the shared as3 folder under the partition like pools:

     

    Solved: AS3 referencing objects across applications - DevCentral (f5.com)

     

     

    If the 2 apps/virtual servers are in the same tenant you can try the "use:" pointer to define the pool outside of the 2 virtual servers in the AS3 declaration

     

    BIG-IP AS3 Declaration Purpose and Function (f5.com)

     

    "persistenceMethods": [ {"use": "mypersist"} ]
    "mypersist": {
        "class": "Persist",
        "persistenceMethod": "cookie",
        "cookieName": "MYCOOKIE"
    }

    Other than that for certficates I have not tried using url but I saw:

    TLS Encryption (f5.com)

     "pkcs12_crt_key_encr_url": {
              "class": "Certificate",
              "remark": "saves encr key in openssl format",
              "passphrase": {
                "ciphertext": "cGFzc3dvcmQ=",
                "protected": "eyJhbGciOiJkaXIiLCJlbmMiOiJub25lIn0",
                "ignoreChanges": true
              },
              "pkcs12Options": {
                  "keyImportFormat": "openssl-legacy"
              },
              "pkcs12": {
                  "url": "https://mycompany/certs/my_p12.p12" }
      
            },
            "pkcs12_crt_key_bundle": { 
                "class": "Certificate",
                "remark": "multiple certs, no passphrase, ignore change on redeploy",
                "pkcs12Options": {
                  "keyImportFormat": "openssl-legacy",
                  "ignoreChanges": true
                },
                "pkcs12": {
                    "url": "http://mycompany/certs/my_pfx.pfx" }
      
            }