For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RayThomsen_7557's avatar
RayThomsen_7557
Icon for Nimbostratus rankNimbostratus
Sep 17, 2015

CSR generation doesn't include SAN domains

I attempted to create a SAN CSR through the GUI (11.4.1) based on this:   https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13471.html   and ended up with a CSR with only the domain...
application delivery
LTM
RayThomsen_7557's avatar
RayThomsen_7557
Icon for Nimbostratus rankNimbostratus
Sep 24, 2015

I tried doing this in tmsh without it seeming to work either. This was my commmand (domain names swapped out):

 

tmsh create /sys crypto key example.domain.com_2015 gen-csr common-name "example.domain.com" country "US" lifetime 730 subject-alternative-name "DNS: DNS:example.domain.com"

 

This produced a key and CSR but when I ran the CSR through a utility the subject-alternative-name field was empty.