Forum Discussion

flicky2000_1616's avatar
flicky2000_1616
Icon for Nimbostratus rankNimbostratus
Nov 15, 2015

F5 Self Signed Cert...Client-SSL-Profile Issue

Hi I've used the process below to create a new self signed cert and key on the F5 (from https://support.f5.com/kb/en-us/solutions/public/14000/500/sol14534.html). My Cert and key are created fine usi...
LTM
security
  • jdevine_236609's avatar
    jdevine_236609
    Jan 19, 2016

    Ok, we figured this out. Nothing was broken it's just a human factors issue with the interface. The dropdown options for cert/key are just lists, they don't actually select the options unless you click "Add" which puts the selections in the text input box just below. This was confusing because so many other configu menus in the F5 are select a dropdown box option and save the config, but for some reason this is different.

     

    So bottom line, once we clicked "Add" which copied the selections from the dropdown box to the free text entry field below and save the config, it worked.

     

SynACk_128568's avatar
SynACk_128568
Icon for Cirrostratus rankCirrostratus
Nov 16, 2015

Also this is expected behaivour which you are seeing you will be applying the cert and key and after submitting you are seeing some differnet cert/key in the profile .

 

But this does not change the cert/key in reality , if you check in tmsh output : list ltm profile client-ssl you will see the cert/key which you attached .

 

Behaivour is like this : When you select the clientssl profile under Local Traffic -->Profiles-->SSL--> Client ›› F5 will present the first alphabetical certificate/key from the SSL certificate list from System ›› File Management : SSL Certificate List.

 

It doesn't affect anything/traffic but doesn't make sense.

 

Link for reference: https://devcentral.f5.com/questions/f5-self-signed-certclient-ssl-profile-issue