For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ankur_5273's avatar
Ankur_5273
Icon for Nimbostratus rankNimbostratus
Jan 09, 2015

Migrate SSL Certificate from backend web server to F5

Hi Experts   We have a F5 LTM 1600 LTM V11.2.1 in Active/Standby hosting multiple websites . There are 3 websites hosted on F5 having Virtual IP 172.16.2.20 running on Service port "Any" (i.e 0) ....
Ankur_5273's avatar
Ankur_5273
Icon for Nimbostratus rankNimbostratus
Jan 09, 2015

Hi Michael

 

Thanks for the link .I will generate CSR as per sol13471 ; however i also happen to go through sol13770

 

(sol13770: The BIG-IP system fails to include the Subject Alternative Name extension while generating a CSR) .

 

Can you please suggest if sol13770 would hamper my CSR creation on LTM or not going to effect in my scenario . I was also unable to get the meaning of word "extension " in SAN Extension . Can you please let me know about same ?

 

Ankur

 

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Jan 09, 2015
It looks like the issue in SOL13770 was fixed in version 11.3.0, so if you're using a newer version than that, you should be fine. Otherwise, it may pose a problem, since you will be adding additional names (I think what it means by extensions is properties... Not 100% sure, but that's my guess. and the Subject Alternative Name list is a property) It that's the case, you may want to follow the link to SOL11438 and create the CSR that way.