For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Srinivasan_G_31's avatar
Srinivasan_G_31
Icon for Nimbostratus rankNimbostratus
Dec 07, 2014

Configuring Certificate Chain

Friends - i have imported the intermediate and root certificate from the CA onto my LTM system running 11.5 through GUI. Now i have to create a bundle/chain certificate. I've done this through comman...
R_Marc's avatar
R_Marc
Icon for Nimbostratus rankNimbostratus
Dec 07, 2014

To do so from LTM: scp the CA chain to the box: /config/ssl/ssl.crt/

root@(localhost)(cfg-sync)(Active)(/Common)(tmos)  install sys crypto cert entrust from-local-file /config/ssl/ssl.crt/entrust-bundle.crt

root@(localhost)(cfg-sync)(Active)(/Common)(tmos) list sys file ssl-cert entrust.crt 
sys file ssl-cert entrust.crt {
    certificate-key-size 2048
    checksum SHA1:3286:16a996325ea33c7876248c6e056c6a856fafb04b
    create-time 2014-12-07:08:35:54
    created-by root
    expiration-date 1636685477
    expiration-string "Nov 12 02:51:17 2021 GMT"
    is-bundle true
    issuer "CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net"
    key-type rsa-public
    last-update-time 2014-12-07:08:35:54
    mode 33152
    revision 1
    serial-number 1276021817
    size 3286
    subject "CN=Entrust Certification Authority - L1C,OU=(c) 2009 Entrust, Inc.,OU=www.entrust.net/rpa is incorporated by reference,O=Entrust, Inc.,C=US"
    updated-by root
    version 3
}