Forum Discussion

Maximilian_Mar1's avatar
Maximilian_Mar1
Icon for Nimbostratus rankNimbostratus
Jul 06, 2017

Error Message, opening Certs in GUI

Hello Community,

 

Every time I click on a certificate i get the following Error Message:

 

I found a work around, exporting the certificates over tmsh, but i finally want to fix this issue. Every help is much appreciated.

 

Greetings, Maximilian Martin

 

BIG-IP
bug
cerrtificate
LTM
security
  • Ashwin_Venkat's avatar
    Ashwin_Venkat
    Icon for Employee rankEmployee
    Jul 06, 2017

    Do you have double .crt extension in any of the certificate name, by any chance? We have a known bug where that prevents you from viewing any of the certificates and its fixed in 12.1.2: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-12-1-2.htmlA602502-2

     

    When importing/creating a certificate via the GUI, we add the .crt extension automatically, so if you add it from your side manually when entering the name, it tends to include a double .crt extension and that results in you running into this bug.

     

    • Maximilian_Mar1's avatar
      Maximilian_Mar1
      Icon for Nimbostratus rankNimbostratus
      Jul 10, 2017

      "Do you have double .crt extension in any of the certificate name, by any chance?"

       

      That was the right question. Yes we had 2 Certificates with "name.crt". It showed up as "name.crt.crt" in tmsh.

       

      Thank you very much. You solved the problem! :-)

       

      Greetings, Maximilian Martin

       

    • Maximilian_Mar1's avatar
      Maximilian_Mar1
      Icon for Nimbostratus rankNimbostratus
      Jul 11, 2017

      Just for future Engineers who might see this Question. Even when a single certificate is named wrong, it is plausible that all certs dont open. (Version 12.1.2 and earlier)

       

      Greetings, Maximilian Martin

       

  • Ashwin_Venkat_1's avatar
    Ashwin_Venkat_1
    Historic F5 Account
    Jul 06, 2017

    Do you have double .crt extension in any of the certificate name, by any chance? We have a known bug where that prevents you from viewing any of the certificates and its fixed in 12.1.2: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-12-1-2.htmlA602502-2

     

    When importing/creating a certificate via the GUI, we add the .crt extension automatically, so if you add it from your side manually when entering the name, it tends to include a double .crt extension and that results in you running into this bug.

     

    • Maximilian_Mar1's avatar
      Maximilian_Mar1
      Icon for Nimbostratus rankNimbostratus
      Jul 10, 2017

      "Do you have double .crt extension in any of the certificate name, by any chance?"

       

      That was the right question. Yes we had 2 Certificates with "name.crt". It showed up as "name.crt.crt" in tmsh.

       

      Thank you very much. You solved the problem! :-)

       

      Greetings, Maximilian Martin

       

    • Maximilian_Mar1's avatar
      Maximilian_Mar1
      Icon for Nimbostratus rankNimbostratus
      Jul 11, 2017

      Just for future Engineers who might see this Question. Even when a single certificate is named wrong, it is plausible that all certs dont open. (Version 12.1.2 and earlier)

       

      Greetings, Maximilian Martin