topic Re: Create local certificate and ssl/tls profile using PANOS SDK in python in Automation/API Discussions

Create local certificate and ssl/tls profile using PANOS SDK in python

CK_Parthasarathi — Tue, 01 Feb 2022 17:31:03 GMT

Hi,

Has anyone tried creating a local cert and ssl/tls profile using the SDK?

If yes, could you please point me in the right direction.

In the configuration tree, I'm unable to find those objects so wondering if this feature hasn't been released in the yet.

https://pan-os-python.readthedocs.io/en/latest/configtree.html

Thanks

Re: Create local certificate and ssl/tls profile using PANOS SDK in python

Carlos_Mora — Tue, 30 May 2023 20:34:42 GMT

Hey I am trying to create the same solution, Did you find something?

Re: Create local certificate and ssl/tls profile using PANOS SDK in python

eeldeen8951 — Mon, 25 Sep 2023 11:44:54 GMT

hi please i need a way to create ssl/tls service profile either with api or sdk
thanks for your time

Re: Create local certificate and ssl/tls profile using PANOS SDK in python

Carlos_Mora — Mon, 25 Sep 2023 14:05:09 GMT

Hello Community i was able to create an SSL Profile using the api

def create_ssl_profile(base_url,api_key):

FW_Name = hostname[hostname.find('fw'):hostname.find('.transit')]

Profile_Name = '{}-mgmt-ssl-tls-service-profile'.format(FW_Name)

#Create a session

session = requests.session()

params = {

'key': api_key,

'type': 'config',

'action': 'set',

'xpath': "/config/shared/ssl-tls-service-profile/entry[@name='profile_name']",

'element': "<certificate>New Wildcard Cert</certificate><protocol-settings><max-version>max</max-version><min-version>tls1-2</min-version></protocol-settings>"

}

old_string = 'profile_name'

new_string = Profile_Name

modified_xpath = params['xpath'].replace(old_string, new_string)

params['xpath'] = modified_xpath

try:

# Send a set request

response = session.post(base_url, params=params, verify=False)

response.raise_for_status()

except requests.exceptions.RequestException as e:

logging("An error occurred: {e}")

print("An error occurred: {e}")

sys.exit()

print('SSL Profile Created:', Profile_Name)

return Profile_Name

def Configure_SSL_Profile(base_url,api_key,Profile_Name):

#Create a session

session = requests.session()

params = {

'key': api_key,

'type': 'config',

'action': 'set',

'xpath': "/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system",

'element': "<ssl-tls-service-profile>profile_name</ssl-tls-service-profile>"

}

old_string = 'profile_name'

new_string = Profile_Name

modified_xpath = params['element'].replace(old_string, new_string)

params['element'] = modified_xpath

try:

# Send a set request

response = session.post(base_url, params=params, verify=False)

response.raise_for_status()

except requests.exceptions.RequestException as e:

logging("An error occurred: {e}")

print("An error occurred: {e}")

sys.exit()

print('SSL Assingned to Interface:', Profile_Name)

def commit(base_url,api_key):

session = requests.session()

params = {

'key': api_key,

'type': 'commit',

'cmd': "<commit></commit>"

}

try:

# Send a commit request

response = session.get(base_url, params=params, verify=False)

response.raise_for_status()

except requests.exceptions.RequestException as e:

logging("An error occurred: {e}")

print("An error occurred: {e}")

sys.exit()

print('Commit Completed')

Re: Create local certificate and ssl/tls profile using PANOS SDK in python

eeldeen8951 — Tue, 26 Sep 2023 07:32:29 GMT

Thank you so much for your response 🙂

Please tell me how did you create the
xpath:

'xpath': "/config/shared/ssl-tls-service-profile/entry[@name='profile_name']",

and the element

'element': "<certificate>New Wildcard Cert</certificate><protocol-settings><max-version>max</max-version><min-version>tls1-2</min-version></protocol-settings>"

is there any criteria to create them