Forum Discussion

flicky2000_1616's avatar
flicky2000_1616
Icon for Nimbostratus rankNimbostratus
Nov 15, 2015

F5 Self Signed Cert...Client-SSL-Profile Issue

Hi I've used the process below to create a new self signed cert and key on the F5 (from https://support.f5.com/kb/en-us/solutions/public/14000/500/sol14534.html). My Cert and key are created fine usi...
LTM
security
  • jdevine_236609's avatar
    jdevine_236609
    Jan 19, 2016

    Ok, we figured this out. Nothing was broken it's just a human factors issue with the interface. The dropdown options for cert/key are just lists, they don't actually select the options unless you click "Add" which puts the selections in the text input box just below. This was confusing because so many other configu menus in the F5 are select a dropdown box option and save the config, but for some reason this is different.

     

    So bottom line, once we clicked "Add" which copied the selections from the dropdown box to the free text entry field below and save the config, it worked.

     

SynACk_128568's avatar
SynACk_128568
Icon for Cirrostratus rankCirrostratus
Nov 16, 2015

  1. After creating the cert and key

     

  2. installed the cert and key in keystore

     

3.i create new client-ssl profile and assigned the cert and key to the profile using GUI and and the profile was created , if you click the certificate key chain it will show the correct cert/key .

 

Also you can use tmsh: create ltm profile client-ssl test cert f5test.com_self-signed_2015.crt key f5test.com_slf-signed_2015.key chain none

 

Output :

 

ltm profile client-ssl test { cert f5test.com_self-signed_2015.crt key f5test.com_self-signed_2015.key }

 

  • SynACk_128568's avatar
    SynACk_128568
    Icon for Cirrostratus rankCirrostratus
    Nov 16, 2015
    version i tried is v11.6.0