Forum Discussion

wowchens's avatar
wowchens
Icon for Nimbostratus rankNimbostratus
Dec 19, 2008

Import Wildcard Cert from PFX

Hello Guys:

 

 

I am having issues with importing a wildcard cert thats in pfx format. When I convert to pem format using openssl and import in LTM, it sees it as certificate bundle and obviously I am not able to use that cert in a server or client profile. On my Windows server, its recognized properly i.e for server authentication.

 

 

Am I doing anything wrong? Do I have to request a new cert from LTM?

 

 

Appreciate any help you can offer on this.
config
design
  • wowchens's avatar
    wowchens
    Icon for Nimbostratus rankNimbostratus
    Dec 19, 2008
    It seems stupid but I got it fixed, I opened the pem file and saved crt and key files separately and that worked like a charm. Here are the instructions from Ask F5 that I used. I never had to do this before and all my microsoft cert formats used to work without having to separate the crt and key files. Any ways, I am all set.

     

     

    Using a text editor, divide the new PEM-encoded file into separate certificate and private key files by performing the following procedure:

     

     

    1. Cut the text beginning with BEGIN CERTIFICATE and ending with END CERTIFICATE, making sure to include the BEGIN CERTIFICATE and END CERTIFICATE statements.

     

     

    2. Save the certificate text as a new text file with a .crt extension.

     

     

    For example: mynewcert.crt

     

    3. Cut the text beginning with BEGIN RSA PRIVATE KEY and ending with END RSA PRIVATE KEY, making sure to include the BEGIN RSA PRIVATE KEY and END RSA PRIVATE KEY statements.

     

     

    4. Save the key text as a new text file with a .key extension.

     

     

    For example: mynewkey.key