For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

computerli's avatar
computerli
Icon for Altostratus rankAltostratus
May 17, 2018

Firmware update removed private certificate from ca-bundle

On my test VM, I added certificate from my internal CA to the ca-bundle and it looked fine. I updated the firmware from BIGIP-13.1.0.2 to BIGIP-13.1.0.6   After the update the certificate from my ...
application delivery
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
May 18, 2018

After the update the certificate from my internal CA is no longer in the ca-bundle. Is this the default behavior?

 

It is not recommended to edit default objects in BigIP. this can cause issues during upgrades.

 

If you want to add a CA in ca-bundle, create your own and add both internal CA and ca-bundle certificates.

 

The problem is F5 provides Certificate authorities bundle upgrades which may be included in upgrade packages. the last one was released on 04/16/2018 and 13.1.0.6 was released on 04/30/2018...