Forum Discussion

Raghu_Nair_7463's avatar
Raghu_Nair_7463
Icon for Nimbostratus rankNimbostratus
Jan 13, 2012

How to generate SAN certifiate using iControl API ?

csr generenation API doesnt support multiple SANs .

 

 

The work around is : Use openssl too to generate keys and CSR.

 

http://support.f5.com/kb/en-us/solutions/public/11000/400/sol11438.html

 

 

Suppose we want to re-use the existing key which is in FIPs or password mode.

 

 

Do anyone have idea how to retrieve this key and use in openssl as parameter ?

 

 

Thanks,

 

Raghu

 

dev
devops
iControl
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jan 13, 2012
    Hi Raghu,

     

     

    I think openssl should be able to access keys stored in FIPS. Can you try testing this on a FIPS unit?

     

     

    If that doesn't work, I guess you'd need to generate a new key and import it to the FIPS card afterwards.

     

     

    Aaron