Cipher group is not created if it shares the same name as the referenced cipher rule

[f5-rahm]

Environment

• ACC Version: 1.19.2
• AS3 Version: 3.45.0
• BIG-IP Version: 15.1.8.1

Summary

Cipher-group is not converted from config to AS3 if the cipher group and referenced cipher rule share the same name.

Steps To Reproduce

Steps to reproduce the behavior:

1. Convert following config:

   app-service none
   cert-key-chain {
       default {
           cert /Common/default.crt
           key /Common/default.key
       }
   }
   cipher-group /Common/TLSv1.3
   ciphers none
   defaults-from /Common/clientssl
   inherit-ca-certkeychain true
   inherit-certkeychain true
   options { dont-insert-empty-fragments }
   }
   ltm cipher group /Common/TLSv1.3 {
   allow {
       /Common/TLSv1.3 { }
   }
   }
   ltm cipher rule /Common/TLSv1.3 {
   cipher TLSv1_3
   dh-groups DEFAULT
   signature-algorithms DEFAULT
   }

2. Observe the resulting incorrect as3 declaration:

                   "certificates": [
                       {
                           "certificate": "certificate_default"
                       }
                   ],
                   "cipherGroup": {
                       "use": "/Common/Shared/TLSv1.3"
                   },
                   "class": "TLS_Server",
                   "tls1_0Enabled": true,
                   "tls1_1Enabled": true,
                   "tls1_2Enabled": true,
                   "tls1_3Enabled": true,
                   "singleUseDhEnabled": false,
                   "insertEmptyFragmentsEnabled": false
               },
               "TLSv1.3": {
                   "cipherSuites": [
                       "TLSv1_3"
                   ],
                   "namedGroups": [
                       "DEFAULT"
                   ],
                   "signatureAlgorithms": [
                       "DEFAULT"
                   ],
                   "class": "Cipher_Rule"
               }

Expected Behavior

The class type of Cipher_Group should also be created. But it isn't. However, if I change the names of the cipher group and rule to be unique, it works fine as shown below.

ltm profile client-ssl /Common/cssl.TestSuite {
    app-service none
    cert-key-chain {
        default {
            cert /Common/default.crt
            key /Common/default.key
        }
    }
    cipher-group /Common/cg_TLSv1.3
    ciphers none
    defaults-from /Common/clientssl
    inherit-ca-certkeychain true
    inherit-certkeychain true
    options { dont-insert-empty-fragments }
}
ltm cipher group /Common/cg_TLSv1.3 {
    allow {
        /Common/cr_TLSv1.3 { }
    }
}
ltm cipher rule /Common/cr_TLSv1.3 {
    cipher TLSv1_3
    dh-groups DEFAULT
    signature-algorithms DEFAULT
}

### RESULTING AS3 ###

"cssl.TestSuite": {
    "certificates": [
        {
            "certificate": "certificate_default"
        }
    ],
    "cipherGroup": {
        "use": "/Common/Shared/cg_TLSv1.3"
    },
    "class": "TLS_Server",
    "tls1_0Enabled": true,
    "tls1_1Enabled": true,
    "tls1_2Enabled": true,
    "tls1_3Enabled": true,
    "singleUseDhEnabled": false,
    "insertEmptyFragmentsEnabled": false
},
"cg_TLSv1.3": {
    "allowCipherRules": [
        {
            "use": "/Common/Shared/cr_TLSv1.3"
        }
    ],
    "class": "Cipher_Group"
},
"cr_TLSv1.3": {
    "cipherSuites": [
        "TLSv1_3"
    ],
    "namedGroups": [
        "DEFAULT"
    ],
    "signatureAlgorithms": [
        "DEFAULT"
    ],
    "class": "Cipher_Rule"
}```