apim-cli
apim-cli copied to clipboard
Extend the functionality of "override_certificates" environment property
Problem description
Current behavior:
With regards to the latest version of Axway API Management i.e. v20250530, if the API management configuration file (config.json) has explicit references to the backend certificates, these certificates will override any default certificates automatically added upon importing backend API using Open API Specification. This behavior is consistent irrespective of whether the "override_certificates" environment variable is set to true or false.
Feature request
Requested behavior:
- If the environment variable "override_certificates" is set to true, the backend certificates added by default should be removed.
- Without any need for explicitly adding the certificate chain to the configuration file, the certificate chain associated with the backend URL specified in the "backendBasepath" should be automatically downloaded and added to the trusted certificates.
Advantages:
- While OAS can specify the front-end VIP server URLs, the certificates added will belong to the backend URL.
- Prevents the burden on the developers to explicitly include certificate chain in the configuration file.
- Future possibility would be for Axway API Manager to automatically reimport the trusted certificates in case TLS errors occur due to invalid certificate chain encountered.