Forum Discussion
NimbostratusCa-Bundle
is it possible to import certificate with extension cer to the ca-bundle ?
5 Replies
jgranieri
Samir_Jha_52506Noctilucent
Question is not clear. Could you plz explain your requirement?
msamir_312520i have a custom root certificate and i'd like to import it in the ca-bundle.crt
- Samir_Jha_52506
Option 1. There are many way to add file in ca-bundle but best way is. download ca-bundle.crt in ur machine, opne file, paste all certificate(which you wanted to add) below at end, save & upload in in different names & attach to ssl profile.
Option 2. Copy all the certificate which you wanted to add in ca-bundle.crt. Login to CLI F5: vi ca-bundle.crt , Go to insert mode & paste all certificate which you wanted to add in end file. Run
tmsh sys load config
The default ca-bundle.crt file itself can be difficult (if not impossible) to manage using UI or TMSH in later versions of BIG-IP. I tested modifying the default ca.bundle.crt file with this iApp and it seemed to work very well. Very easy to install:
https://www.f5.com/pdf/deployment-guides/f5-ca-bundle-dg.pdf
Kevin
