Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Harishwar_Redd2's avatar
Harishwar_Redd2
Icon for Nimbostratus rankNimbostratus
Aug 26, 2019

01070317:3: sslprofile's key and certificate do not match

I am renewing my cert in F5 LTM device, i am unable to renew the cert. Giving the error sslprofile's key and certificate do not match. same time i am trying to generate new CSR with same name i am no...
application delivery
big-ip
LTM
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Aug 26, 2019

Hi,

Can you check whether the certificate matches the private key?

openssl rsa -noout -modulus -in <private key name>.key | openssl md5
openssl x509 -noout -modulus -in <certificate name>.crt | openssl md5

If the md5 values are same, create pfx certificate.

openssl pkcs12 -export -out <pkcs name>.pfx -inkey <private key name>.key -in <certificate name>.crt

Copy .pfx file to /shared/tmp/ folder and import it.

tmsh install sys crypto pkcs12 <pkcs name>.pfx from-local-file /shared/tmp/<pkcs name>.pfx passphrase <pkcs12 passphrase>