Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

Equivalent of 'serverssl server cert ignore' in proxy?

Michel_van_der_
Nimbostratus
Nimbostratus
I have a proxy defintion, and I want to do the equivalent of:

bigpipe proxy 1.2.3.4:443 serverssl server cert ignore  
  
It looks like
ITCMLocalLB.Proxy.set_server_certificate_mask
might be the right iControl call (I could be wrong...), but the description of the mask in the docs (The mask specifying how server certificate is handled) is not too informative. Is this the right call, and where do I find the definition of the what the mask does?
3 REPLIES 3

Michel_van_der_
Nimbostratus
Nimbostratus
Thanks. As an FYI, turns out that particular info is not in the wsdl files, or

 

in the docs. I did find it in the idl files (I needed the value for my perl

 

implementation...).

 

 

PROXY_SERVER_CERTIFICATE_IGNORED = 0

 

PROXY_SERVER_CERTIFICATE_REQUIRED = 2

AlSjogren_12704
Historic F5 Account
set_server_certificate_mask is the correct method. The state you want is PROXY_SERVER_CERTIFICATE_IGNORED.

 

 

Al

Joe_Pruitt
Cirrostratus
Cirrostratus
These are defined as constants in the idl and we do not currently have mapping for them in the WSDL. They are included in the documentation though. They are located in the help page for ITCMLocalLB::Proxy. You can navigate there by the following tree in the help

 

 

API Reference->ITCM->ITCMLocalLB->Proxy