For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ondrej_Prochazk's avatar
Ondrej_Prochazk
Icon for Nimbostratus rankNimbostratus
Nov 02, 2015

Read SSL client profile via REST API

I'm using iControl REST API for updating SSL client profile.

 

On the administration WEB I can select if the parameter or group of parameters are customized or not, and when is customized I can set desired value.

 

Problem is that I cannot read or set via REST API if the value is customized or not. If the value is not customized and I read the SSL profile via REST API, the response contain value based on parent certificate. Is it possible to determine if value is customized or is inherited from parent profile?

 

application delivery
iControlREST
LTM
management

1 Reply

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Nov 02, 2015

    I believe the UI and tmsh have a way to determine if a value was explicitly (or customized) set by referencing the bigip.conf which I'm sure they keep in a parsed object in memory. I don't think the rest API has any way to do this, as it's going to return all available settings so you can see their value (sorta like "all-properties" in tmsh). In order to do what you seem to want, you'd likely need to pull down the bigip.conf itself (and potentially other config files) and parse it locally to make those kind of determinations.

     

    You could also run tmsh scripts via the rest API, I think, which would be a way to see what values are explicitly set for any given object.