Forum Discussion

dipta_03_149731's avatar
dipta_03_149731
Icon for Nimbostratus rankNimbostratus
Jul 14, 2015

Getting error while trying to create Clientssl Profile

I have extracted cert and key in pem format from pfx file and imported them to F5.

 

Now when i try to create Clientssl profile I get below error:

 

01070313:3: Error reading key PEM file /config/ssl/ssl.key/CERT_SBWEB_INTERNAL.key for profile PROFILE_SBWEB_INTERNAL: error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib

 

What can I check for this?

 

2 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 14, 2015

    Did you export the cert and key from pfx with or without a passphrase on the key?

     

    What platform are you running? On 11.x platforms you can import directly from pkcs12.

     

  • dipta_03_149731's avatar
    dipta_03_149731
    Icon for Nimbostratus rankNimbostratus
    Jul 15, 2015

    Thanks for replying Kevin. Its a old version device 9.4.x so I had to run different set of open ssl commands to extract the pem file sfrom pfx and then imported to the device and it worked fine.

     

    openssl pkcs12 -nocerts -out sbwebkeys.pem -in ime_sbweb_f5_cert/ export.pfx openssl pkcs12 -in ime_sbweb_f5_cert\ export.pfx -nocerts -out sbwebkeys.pem