Forum Discussion
andy_12_5042
Nimbostratus
Dec 29, 2010pycontrol to set certificate/key for ssl profile
Sorry for the triple post last question...... My browser appeared to timeout so I thought submission was failing..
I have noticed that it is not possible to create a new profile and set the ...
andy_12_5042
Nimbostratus
Dec 30, 2010what would be nice is the ability to do the same thing as I can via bigpipe with icontrol:
b profile clientssl test {key "keyfile" cert "ssl-certificate" passphrase "passphrase"}
It is actually cleaner to use pyhthon with ssh keys and call bigpipe to do this one piece of the automation. Otherwise I have to go through all of this headache with default parent profiles and multiple calls. This way is one single call and I can use this to create a new profile or renew the certificate of an existing profile without all the hassles. The only thing is it would be nice to build a little web app that is all web service via CGI and not have to hack with system calls directly on the F5 via os.system....
Something like this (seems to work good but is kind of hacky. Again I am using ssh PKI to keep secure and only allow from internal)
remotehost='icontrol@' + host
command= " b profile clientssl " + profname + " {defaults from userl key " + "\" " + key + "\" " + " cert " + "\" " + cert + "\" " + "}"
os.system(' ssh "%s" "%s"' % (remotehost, command) )
Anyway, hopefully there will be some fix in icontrol soon. I still enjoy using pycontrol and appreciate all your help...
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects