Forum Discussion
Maximilian_Mar1
Nimbostratus
NimbostratusError Message, opening Certs in GUI
Hello Community,
Every time I click on a certificate i get the following Error Message:
I found a work around, exporting the certificates over tmsh, but i finally want to fix this issue. Every help is much appreciated.
Greetings, Maximilian Martin
Do you have double .crt extension in any of the certificate name, by any chance? We have a known bug where that prevents you from viewing any of the certificates and its fixed in 12.1.2: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-12-1-2.htmlA602502-2
When importing/creating a certificate via the GUI, we add the .crt extension automatically, so if you add it from your side manually when entering the name, it tends to include a double .crt extension and that results in you running into this bug.
Samir_Jha_52506Noctilucent
Which version of F5 you are running. I guess, issue with CRL file size.
Maximilian_Mart12.1.0 2.0.1468 (HF2)
- Samir_Jha_52506
Seems bug.I will recommend you to please open support case.
Ashwin_VenkatEmployee
Do you have double .crt extension in any of the certificate name, by any chance? We have a known bug where that prevents you from viewing any of the certificates and its fixed in 12.1.2: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-12-1-2.htmlA602502-2
When importing/creating a certificate via the GUI, we add the .crt extension automatically, so if you add it from your side manually when entering the name, it tends to include a double .crt extension and that results in you running into this bug.
Maximilian_Mar1"Do you have double .crt extension in any of the certificate name, by any chance?"
That was the right question. Yes we had 2 Certificates with "name.crt". It showed up as "name.crt.crt" in tmsh.
Thank you very much. You solved the problem! :-)
Greetings, Maximilian Martin
- Maximilian_Mar1
Just for future Engineers who might see this Question. Even when a single certificate is named wrong, it is plausible that all certs dont open. (Version 12.1.2 and earlier)
Greetings, Maximilian Martin
Do you have double .crt extension in any of the certificate name, by any chance? We have a known bug where that prevents you from viewing any of the certificates and its fixed in 12.1.2: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-12-1-2.htmlA602502-2
When importing/creating a certificate via the GUI, we add the .crt extension automatically, so if you add it from your side manually when entering the name, it tends to include a double .crt extension and that results in you running into this bug.
- Maximilian_Mar1
"Do you have double .crt extension in any of the certificate name, by any chance?"
That was the right question. Yes we had 2 Certificates with "name.crt". It showed up as "name.crt.crt" in tmsh.
Thank you very much. You solved the problem! :-)
Greetings, Maximilian Martin
- Maximilian_Mar1
Just for future Engineers who might see this Question. Even when a single certificate is named wrong, it is plausible that all certs dont open. (Version 12.1.2 and earlier)
Greetings, Maximilian Martin