Forum Discussion
NimbostratusProfile ssl server using pass phrase
Hola, buenas
Necesito actualizar un certificado publico, pero me encuentre un par de profile ssl server usando pass phrase, el escenario es que me pasaran un certificado en formato pfx con su clave de proteccion.
Entonces cuando actualice el certificado en el profile ssl server, debo ingresar la clave de proteccion del pfx en el pass phrase , previamente importado ?
O cuando actualice automaticamente f5 cambia el pass phrase ?
No tengo mucha experiencia en f5 y es primera vez que me encuentro en este escenario
Encontre este articulo pero nose si lo estoy interpretando bien:
https://my.f5.com/manage/s/article/K14806
Gracias y saludos a tod@s
3 Replies
- Melissa_C
Moderator
Hello jcbr2002
Providing the community with a translation of your post.
"Hello, good day,
I need to update a public certificate, but I've encountered a couple of SSL server profiles using a passphrase. The situation is that I've been given a certificate in PFX format with its protection key.
So, when I update the certificate in the SSL server profile, do I need to enter the PFX protection key in the passphrase field, after importing it?
Or does F5 automatically change the passphrase when I update the certificate?
I don't have much experience with F5, and this is the first time I've encountered this scenario.
I found this article, but I'm not sure if I'm interpreting it correctly:
https://my.f5.com/manage/s/article/K14806
Thank you and greetings to everyone."
-Melissa
- BramsBytes
Cirrus
Unless the private key that is inside the PFX is also protected by a password you wouldn't need to put in a Passphrase in the Server SSL profile.
Personally, I have never encountered an encrypted private key and just providing the password while importing the PFX file was sufficient.
Did you create the CSR your self? If so: did you put a password while generating the private key? If yes: then you'll need that Passphrase on the Server SSL Profile, otherwise no, you don't need to provide a password for the private key.
jcbr2002Gracias BramsBytes
No, I didn't create the CSR file; the PFX file was given to me by another department. I don't know if they entered a password, but I assume not. In any case, if the current passphrase is the password used to import the current certificate, will it have any impact? Apparently not, but I'm checking with the previous administrators to see what they did.
Gracias y saludos
