Forum Discussion

Carlos_Colon_24's avatar
Carlos_Colon_24
Icon for Nimbostratus rankNimbostratus
Oct 19, 2016

Renewing SSL certificate for SSL offload - question regarding CSR creation

We are doing SSL Offload (encrypt to clients, plaintext to servers) using a cert that needs to be renewed. The server admin sent us the .crt and .key files that apparently he generated from the serve...
application delivery
LTM
  • AJ_01_135899's avatar
    AJ_01_135899
    Oct 19, 2016

    If you have both the key and the cert, it shouldn't matter that it was generated on the server itself. Just import them both and configure the Client SSL profile to apply to the VIP.

     

AJ_01_135899's avatar
AJ_01_135899
Icon for Cirrostratus rankCirrostratus
Oct 19, 2016

Obviously the safe answer would be to wait until after hours.

 

That said, this would be a quick rollout and rollback. To make the rollout and rollback faster you could create a new Client SSL profile (assuming there's only one VIP using this Client SSL profile), and just apply the new profile to the VIP. Rollback would be reverting to the old profile.

 

Just for thoroughness' sake, are there any intermediate certificates in the existing Client SSL profile?