For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

KJ_50941's avatar
KJ_50941
Icon for Nimbostratus rankNimbostratus
Sep 16, 2014

automating SSL certification

I was wondering if there is a way to automate F5 certification, currently we create CSR file and with ref, auth code as well as CSR we can upload certification, can this be automated?

 

Thx

 

3 Replies

  • David_Holmes_9's avatar
    David_Holmes_9
    Historic F5 Account
    Sep 17, 2014

    There are many ways to streamline this. If you wanted to do it programmatically with a SOAP interface, the "KeyCertificate" iControl API has just about every call you would need. Link to KeyCertificate API

    There's also an iControlREST API section (but I can't remember if it has similar functionality for certificates).

    If you like scripting better, you can use the tmsh /sys crypto module. For a start try

        tmsh help /sys crypto cert

    or

        tmsh help /sys crypto key

    Is that enough to get you started?

    • KJ_50941's avatar
      KJ_50941
      Icon for Nimbostratus rankNimbostratus
      Sep 17, 2014
      Thx, If CA doesn't accept automation , I am not sure how this may work.
    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      Sep 18, 2014
      if you want to automate the whole flow including submitting to a CA, then this won't be enough. if you want to automate it including submitting to the CA you will need to see if it allows that and if so how?