Forum Discussion

amanadas's avatar
amanadas
Icon for Nimbostratus rankNimbostratus
May 23, 2019

iControl REST API, F5 SDK and Certificates.

Hello all,

 

 

I have been investigating the iControl REST API and the F5-SDK python modules and I have some questions about how everything works. I started by looking at the code found in https://github.com/f5devcentral/lets-encrypt-python or in https://github.com/farces/acme-f5-deploy and some other sources, here in devcentral and external ones, and I haven't found an answer for:

 

If we use the code as it is in the github and if for some reason after importing some certificates the system does a shutdown or reboot, the configuration is lost, the files are in the system (/var/config/rest/downloads/) but the configuration has no reference to them! Shouldn't there be an extra strep to save the configuration after using the REST API TransactionContextManager?

The REST API uploads the files to /var/config/rest/downloads/ and the code uses this location to configure the certificates, but this is not the standard location for this kind of files. Shouldn't these files be moved to the /config/ssl/ directories first and than configured on the system?

If we leave the certificate files in /var/config/rest/downloads/ and do a save sys ucs, these files are not saved! I know we can add extra location or files to the save operation, but that is an extra step. Again, this makes me think that /var/config/rest/downloads/ is not the correct location for these files.

 

I am using VE 13.1.1.3 as a test system.

 

Thank you for your time reading and replying to my questions.

 

Best regards,

No RepliesBe the first to reply