For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AngryCat_52750's avatar
AngryCat_52750
Icon for Nimbostratus rankNimbostratus
Oct 28, 2013

exporting a cert from the F5

I am following another article - LINK to export a SSL cert on the F5 so i can import it to other IIS web servers.

 

Is there a way to export the cert and the key into a PFX or P12 file?

 

design
management
TMSH

3 Replies

  • ReganAnderson's avatar
    ReganAnderson
    Icon for Employee rankEmployee
    Oct 28, 2013

    You can do this in the CLI using OpenSSL, for example:

     

    v10: openssl pkcs12 -export -out /var/tmp/certkey.p12 -inkey /config/ssl/ssl.key/.key -in /config/ssl/ssl.crt/.crt

     

    v11: openssl pkcs12 -export -out /var/tmp/certkey.p12 -inkey /config/filestore/files_d/Common_d/certificate_key_d/:Common:.key -in /config/filestore/files_d/Common_d/certificate_d/:Common:.crt

     

    In both examples the pkcs12 file is created in /var/tmp/

     

    Hope that helps!

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 28, 2013

    You cannot export to a .pfx/.p12 file. You'll need to export the cert and key separately and rejoin with OpenSSL.

    openssl pkcs12 -export -out file.p12 -inkey [key file] -in [cert file]
  • Richard__Harlan's avatar
    Richard__Harlan
    Historic F5 Account
    Oct 28, 2013

    I think this will have to be done with openSSL on the command line. the following openSSL command should work for you

     

    openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt