Forum Discussion

Sylvain_Goulmy's avatar
Sylvain_Goulmy
Icon for Altostratus rankAltostratus
Mar 16, 2018

Can't modify a client ssl profile from the GUI because iApp is inheriting from it

Hi,

 

I have created via the GUI a client-ssl profile in the /Common partition.

 

This profile is used as a parent by other client-ssl profiles created this time by an iApp. The goal was to mutualize the certificate at the parent level to be able to change it at a single level.

 

I'd like now to change my certificate, but i try to do it via the GUI, i have the following message :

 

The application service .... has strict updates enabled, the object .... must be updated using an application management interface.

 

I'm surprised to see that i can't modify this client-ssl profile anymore whereas it is not part/has not been created by an iApp.

 

Is it this the expected behaviour ?

 

I imagine that to solve my issue, i have to disabled strict-update on all my applications where i have a client-profile inheriting from that parent. The thing is that i have a lot of iApps...

 

Is it the only way to solve that issue ? Is it a bad design to have objects in an iApp inheriting from a parent that was not created by an iApp ?

 

Thanks in advance for your feedbacks. Best regards.

 

PS : Firmware 12.1.3.1

 

application delivery
iApps

2 Replies

Sort By
  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Mar 16, 2018

    As far as I understand you have 2 ssl profiles. 1st ssl profile is a parent of the 2d profile. The 2d profile is used in iApps.

     

    You tried to modify the 1st profile and got an issue.

     

    I made a test on 12.1.2 and I could successfully modify parent profile.

     

    Are you sure that the 1st profile is not used in any iApp? Also check if your 1st profile has a parent which is a part of iApp.

     

    In the 2 scenarios I mentioned, it is expected the error you get.

     

  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Mar 17, 2018

    OK, I made additional tests and I got next iApp created and ssl profile. I disabled strict updates and changed parent profile for iapp profile and then enabled strict updates back. Is this the way you changed parent profile for iapp ssl profile??

     

    As soon as I modify parent profile I get an error. This is expected, since end profile was created via iApps and need to be modified via iapps.

     

    You can create you 3d ssl profile manually and then use in your iApps. This is how I did in my 1st repro. Modifying any parent profile will not trigger any error and end profile is updated accordingly. This is because the end profile was not created by iApps and it is allowed to be modified externally.

     

    I hope this make sense.