apim-cli icon indicating copy to clipboard operation
apim-cli copied to clipboard

Extend the functionality of "override_certificates" environment property

Open apistudaxway opened this issue 2 months ago • 0 comments

Problem description

Current behavior:

With regards to the latest version of Axway API Management i.e. v20250530, if the API management configuration file (config.json) has explicit references to the backend certificates, these certificates will override any default certificates automatically added upon importing backend API using Open API Specification. This behavior is consistent irrespective of whether the "override_certificates" environment variable is set to true or false.

Feature request

Requested behavior:

  • If the environment variable "override_certificates" is set to true, the backend certificates added by default should be removed.
  • Without any need for explicitly adding the certificate chain to the configuration file, the certificate chain associated with the backend URL specified in the "backendBasepath" should be automatically downloaded and added to the trusted certificates.

Advantages:

  • While OAS can specify the front-end VIP server URLs, the certificates added will belong to the backend URL.
  • Prevents the burden on the developers to explicitly include certificate chain in the configuration file.
  • Future possibility would be for Axway API Manager to automatically reimport the trusted certificates in case TLS errors occur due to invalid certificate chain encountered.

apistudaxway avatar Sep 09 '25 00:09 apistudaxway