Forum Discussion

jgill_43164's avatar
jgill_43164
Icon for Nimbostratus rankNimbostratus
May 09, 2011

Programmatically Installing SSL Certificates In F5 Without GUI

Hello,

 

I was wondering if there is a best practice to progammatically installing SSL certificates in F5 without manual intervention. With the assumption the the certificates are generated by a third party and can be placed on any server that the certificates are needed on

 

config
design
  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    May 09, 2011
    My suggestion would be to investigate doing this with iControl (http://devcentral.f5.com/Community/TopicGroups/tabid/1082223/asg/51/showtab/groupforums/Default.aspx).

     

     

    You could do this via CLI to place the Certificate and Key files in the proper directories, but in order to use them you would still need to place them in SSL Profiles and apply them to a Virtual Server which would require direct interface with the main bigip.conf configuration file. Any edits to that file would require a b load to to take effect and that can be disruptive to passing traffic while the configuration file is reloaded.