Forum Discussion

Srivignesh_1217's avatar
Srivignesh_1217
Icon for Nimbostratus rankNimbostratus
Mar 17, 2014

How to download the cert/key file from the /config/filestore/files_d/Common_d/certificate_d/ location?

I created a certificate file inside F5 V.11 box and checked the bigip.conf entry.

 

Below is the cert & key entry:

 

sys file ssl-cert /Common/Test.crt {

 

cache-path /config/filestore/files_d/Common_d/certificate_d/:Common:Test.crt_53924_1

 

revision 1

 

source-path /config/ssl/ssl.crt/Test.crt

 

}

 

sys file ssl-key /Common/Test.key {

 

cache-path /config/filestore/files_d/Common_d/certificate_key_d/:Common:Test.key_53921_1

 

revision 1

 

source-path /config/ssl/ssl.key/Test.key

 

}

 

But I couldn’t find the presence of the actual file under source path.

 

1.) Are we supposed to do move the files from cache to source-path by any means?

 

2.) If I want to download the cert/key file from the device (SystemConfigSync.download_file() method) which path/location I need to point - source-path or cache-path?

 

  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Mar 17, 2014

    Hi

     

    They have a bit of a funky naming convention so you need to escape the ":" with "\". Like this:

     

    ./:Common:star.domain.com.key_16434_2

     

    Never used the SystemConfigSync.download_file method, but try that convention first and see if it works.

     

    /Patrik

     

  • Srivignesh_1217's avatar
    Srivignesh_1217
    Icon for Nimbostratus rankNimbostratus
    Mar 17, 2014

    I could get the file contents when I tried from the CLI. For eg:

     

    1.) cd /config/filestore/files_d/Common_d/certificate_d

     

    2.) vi \:Common\:ExpiryIn365v.crt_43566_1 (or) vi :Common:ExpiryIn365v.crt_43566_1

     

    But I am trying to get the cert/key contents using the below icontrol method:

     

    SystemConfigSync.download_file(filepath, size, offset); where filepath I used are

     

    • /config/filestore/files_d/Common_d/certificate_d/:Common:ExpiryIn365v.crt_43566_1

       

    • /config/filestore/files_d/Common_d/certificate_d/\:Common\:ExpiryIn365v.crt_43566_1

       

    • /config/filestore/files_d/Common_d/certificate_d/Common/ExpiryIn365v.crt_43566_1

       

    • /config/filestore/files_d/Common_d/certificate_d/ExpiryIn365v.crt_43566_1

       

    In all the above combinations of filepath, I end up with the exceptions either

     

    Common::InvalidArgument (or) Error opening file for read operations.

     

  • hari_126827's avatar
    hari_126827
    Icon for Cirrus rankCirrus
    Mar 17, 2014

    Hi,

     

    Please see if workaround section of below link helps:

     

    [http://support.f5.com/kb/en-us/solutions/public/13000/500/sol13534.html]

     

    KRgds,Hari