SSL Profile cipher inheritance

Although I'm not 100% sure this is how it works, I believe that in creating a profile with a parent profile, any modifications will be full overwrites rather than just adding.

The reason I say this is that as I look at the profile, all the inherited values come over, and I can check which ones to modify. In the case of most if not all the other properties, logically the values would need to be fully replaced, not just augmented (e.g. cert key chain, cache size & timeout, etc...). Since everything else seems like it would be overwritten, my presumption would be that you would have to use the full value as you mentioned.

Hope this helps.