Forum Discussion

anthonymaw_com_'s avatar
anthonymaw_com_
Icon for Nimbostratus rankNimbostratus
Dec 04, 2018

How to obtain latest ca-bundle file ?

Hello Where can I download the latest ca-bundle.crt file ? I was attempting to upload a new root CA but wound up accidentally overwriting my current ca-bundle configuration. Not an emergency but I'd like to restore and update. I am running BIG-IP 9.4.8 Thanks much.

 

application delivery
BIG-IP
devops
  • anthonymaw_com_'s avatar
    anthonymaw_com_
    Icon for Nimbostratus rankNimbostratus
    Dec 04, 2018

    hello thank you so much for the reply. I had downloaded the ca-bundle.crt file but after importing it using the web GUI SSL Certificates I have now run into a another problem now where Big-IP returns "An error has occurred while trying to process your request." I'm running BIG-IP 9.4.8 Build 407.0 Hotfix HF4. Does anybody know if there is an issue with loading the latest ca-bundle with an older version of BIG-IP ? Thanks and regards.

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Dec 05, 2018

    I guess TMOS 9.4.8 (release date 31-Aug-2009) may not support new hash algorithms (sha-2).

     

    F5 doesn’t provide software less than version 11!

     

    Try to search in factory default files in your appliance to get the default file!

     

  • anthonymaw_com_'s avatar
    anthonymaw_com_
    Icon for Nimbostratus rankNimbostratus
    Dec 05, 2018

    Thank you Stanislas. I've got a problem right now that the GUI just shows an error message. I assume I will need to SSH into it to use your suggestion finding the default ca-bundle.crt file. Do you know where I can find the command line reference on how to import the downgraded crt file ? thanks much.