Forum Discussion
Albert_Blom_173
Nimbostratus
NimbostratusF5 How to configure Trusted Root certificates ?
Hi,
The party I am connecting with on the receiving side is sending back its client certificates WITHOUT the Root CA, because they assume that is already a certificate trused by the F5.
Sample:
F5 id...
Create a certificate bundle with X4, upload it to the F5 and configure it in the SSL client profile.
---BEGIN CERTIFICATE---
Public key text of x1
---END CERTIFICATE---
---BEGIN CERTIFICATE---
Public key text of x2
---END CERTIFICATE---
---BEGIN CERTIFICATE---
Public key text of x3
---END CERTIFICATE---
---BEGIN CERTIFICATE---
Public key text of x4
---END CERTIFICATE---
Save as a .crt and upload the certificate bundle to system > file management > ssl certificate list > import. Import as a certificate.
Albert_Blom_173Nimbostratus
NimbostratusHi, thanks for your quick response. We had create a chain with X1 thru 4, but when client offers only X1 thru 3 F5 cannot match and provides a 517 error.
