Forum Discussion

Livius's avatar
Livius
Icon for Cirrus rankCirrus
Sep 01, 2020

CSR instead of real certificate in SSL client profile

Hi guys,   I recently have seen at a customer a SSL profile which was referencing a certificate signing request and key + CA rather than the real certificate. While this seems strange, my questi...
application delivery
BIG-IP
Bryan_T_'s avatar
Bryan_T_
Icon for MVP rankMVP

yes that's correct.

B_S's avatar
B_S
Icon for Nimbostratus rankNimbostratus
Jul 11, 2023

Hi Bryan,

I have the same situation, showing me "RSA Certificate, Key & Certificate Signing Request" for a specific certificate. I have no other Content like that on our LB but only "RSA Certificate, Key " . What I've done was just to renew a certificate which was going to expire, sent it to be signed by our PKI and import the new certificate. I don't understand why the CSR is still there and how can I get rid of it. Is this happening because something wrong on my side when I generated the CSR or by my colleague who signed the certificate on PKI?

 

Thank you!

  • Livius's avatar
    Livius
    Icon for Cirrus rankCirrus
    Oct 09, 2023

    It is likely that your colleague who generated the csr did it from the LB directly then uploaded the signed csr (the certificate - which include the cert+key) with the same name to the system identifies it as a "bundle".

    You can simply remove it by clicking on the "bundle", go to the CSR tab and delete from there.