For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

S_Meulmeester's avatar
S_Meulmeester
Icon for Cirrus rankCirrus
Dec 28, 2016

How do I change my self signed device certificate and at the same time upgrade from 1024 to 2048 bits ?

How do I change my self signed device certificate and at the same time upgrade from 1024 to 2048 bits ?. Using the Gui doesn't allow me to change the size to 2048  
BIG-IP DNS
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Dec 28, 2016

Hi,

you can use this command to create the new Certificate with key:

openssl req -x509 -nodes \
-days 3650 \
-newkey rsa:2048 \
-keyout /config/httpd/conf/ssl.key/server.key \
-out /config/httpd/conf/ssl.crt/server.crt \
-subj /C=FR/\
O=Company/\
CN=bigip1.f5demo.com/\
L=My\ City/\
ST=My\ State

Then restart httpd service:

bigstart restart httpd