For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

t-roy's avatar
t-roy
Icon for Nimbostratus rankNimbostratus
Nov 14, 2012

SSL and Cert keystore in V11

Where did they move this to in V11? In v10 it was in /config/ssl.key and ssl.crt  
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 15, 2012
The default LTM certs are still stored in /config/ssl/. The custom certs/keys are stored in the filestore:

 

 

find / -name *.crt* -o -name *.key*

 

/var/ts/dms/common/classes/tcpdf/tcpdf.crt

 

/var/dnscached/config/rndc.key

 

/var/named/config/rndc.key

 

/var/lib/mysql/server.crt

 

find: /proc/32292/net: Invalid argument

 

/config/rndc.key

 

/config/httpd/conf/ssl.crt

 

/config/httpd/conf/ssl.crt/server.crt

 

/config/filestore/.trash_bin_d/.backup_1349198708_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_14

 

/config/filestore/.trash_bin_d/.backup_1349993934_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_15

 

/config/filestore/.trash_bin_d/.backup_1339609266_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_10

 

/config/filestore/.trash_bin_d/.backup_1345881646_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_12

 

/config/filestore/.trash_bin_d/.backup_1352844539_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_20

 

/config/filestore/.trash_bin_d/.backup_1350241745_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_18

 

/config/filestore/.trash_bin_d/.backup_1350075788_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_17

 

/config/filestore/.trash_bin_d/.backup_1352717087_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_19

 

/config/filestore/.trash_bin_d/.backup_1344326451_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_11

 

/config/filestore/.trash_bin_d/.backup_1350073068_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_16

 

/config/filestore/.trash_bin_d/.backup_1349193032_0_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_13

 

/config/filestore/files_d/Common_d/certificate_d/:Common:default.crt_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:root.example.com.crt_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:server.example.com.crt_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:ca-bundle.crt_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:star.example.com.crt_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:f5-irule.crt_1

 

/config/filestore/files_d/Common_d/trust_certificate_d/:Common:dtdi.crt_4

 

/config/filestore/files_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_21

 

/config/filestore/files_d/Common_d/trust_certificate_d/:Common:dtca.crt_3

 

/config/gtm/server.crt

 

/config/big3d/client.crt

 

/config/ssl/ssl.crt

 

/config/ssl/ssl.crt/dtca-bundle.crt

 

/config/ssl/ssl.crt/f5-irule.crt

 

/config/ssl/ssl.crt/default.crt

 

/config/ssl/ssl.crt/ca-bundle.crt.preremoval

 

/config/ssl/ssl.crt/ca-bundle.crt

 

/usr/share/defaults/fs/config/ssl/ssl.crt

 

/usr/share/defaults/fs/config/ssl/ssl.crt/ca-bundle.crt.rpmbackup

 

/etc/pki/tls/certs/ca-bundle.crt

 

/shared/em/ssl.crt

 

/shared/em/ssl.crt/10.0.0.10.crt

 

 

You can import/export these and other files via the GUI or using 'tmsh sys file'

 

 

Aaron