Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

RemcoAA's avatar
RemcoAA
Icon for Altostratus rankAltostratus
Jun 27, 2024

gtm_add failing due to CERT error

I am trying to cluster to GTM devices using the gtm_add command, but this is failing with this error: ERROR: found "END CERT..." without BEGIN at line: 0. ERROR: Malformed certificates found in loc...
gtm
RemcoAA's avatar
RemcoAA
Icon for Altostratus rankAltostratus
Jun 27, 2024

Hi,

TCP port 22 is open and we are using certificates signed by our Internal CA and these are working fine via the browser.

I also got the feeling this error happens before even an attempt is made to connect to the other device.

I am running v17.1.1.3

  • zamroni777's avatar
    zamroni777
    Icon for MVP rankMVP
    Jun 28, 2024

    please try "openssl x509 -in /config/httpd/conf/ssl.crt/server.crt -text -noout" to verify the cert.

    also see the "Signature Algorithm" in the output.
    it should not be sha1
    .

    • RemcoAA's avatar
      RemcoAA
      Icon for Altostratus rankAltostratus
      Jun 30, 2024

      the openssl command gives:

       

      Signature Algorithm: sha256WithRSAEncryption