For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Srinivasan_G_31's avatar
Srinivasan_G_31
Icon for Nimbostratus rankNimbostratus
Dec 07, 2014

Configuring Certificate Chain

Friends - i have imported the intermediate and root certificate from the CA onto my LTM system running 11.5 through GUI. Now i have to create a bundle/chain certificate. I've done this through command line on older versions but not sure how to accomplish this in the newer version. Is the process same in version 11.5 as well?

 

2 Replies

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Dec 07, 2014
    In the gui justed upload or paste all the certs you require into a single cert object.
  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Dec 07, 2014

    To do so from LTM: scp the CA chain to the box: /config/ssl/ssl.crt/

    root@(localhost)(cfg-sync)(Active)(/Common)(tmos)  install sys crypto cert entrust from-local-file /config/ssl/ssl.crt/entrust-bundle.crt

    root@(localhost)(cfg-sync)(Active)(/Common)(tmos) list sys file ssl-cert entrust.crt 
sys file ssl-cert entrust.crt {
    certificate-key-size 2048
    checksum SHA1:3286:16a996325ea33c7876248c6e056c6a856fafb04b
    create-time 2014-12-07:08:35:54
    created-by root
    expiration-date 1636685477
    expiration-string "Nov 12 02:51:17 2021 GMT"
    is-bundle true
    issuer "CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net"
    key-type rsa-public
    last-update-time 2014-12-07:08:35:54
    mode 33152
    revision 1
    serial-number 1276021817
    size 3286
    subject "CN=Entrust Certification Authority - L1C,OU=(c) 2009 Entrust, Inc.,OU=www.entrust.net/rpa is incorporated by reference,O=Entrust, Inc.,C=US"
    updated-by root
    version 3
}