Forum Discussion

Harishwar_Redd2's avatar
Harishwar_Redd2
Icon for Nimbostratus rankNimbostratus
Aug 26, 2019

01070317:3: sslprofile's key and certificate do not match

I am renewing my cert in F5 LTM device, i am unable to renew the cert. Giving the error sslprofile's key and certificate do not match. same time i am trying to generate new CSR with same name i am not able to generate.

 

Need suggestions, how to renew.

application delivery
BIG-IP
LTM
  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Aug 26, 2019

    Hi,

    Can you check whether the certificate matches the private key?

    openssl rsa -noout -modulus -in <private key name>.key | openssl md5
openssl x509 -noout -modulus -in <certificate name>.crt | openssl md5

    If the md5 values are same, create pfx certificate.

    openssl pkcs12 -export -out <pkcs name>.pfx -inkey <private key name>.key -in <certificate name>.crt

    Copy .pfx file to /shared/tmp/ folder and import it.

    tmsh install sys crypto pkcs12 <pkcs name>.pfx from-local-file /shared/tmp/<pkcs name>.pfx passphrase <pkcs12 passphrase>