For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_Pearson_1's avatar
David_Pearson_1
Icon for Nimbostratus rankNimbostratus
Sep 06, 2018

SSL Certificate Issue

Certificate Issue, I had a message from our certificate authority   "As per Google’s blog post, you will need to replace all certificates which were issued before December 1 2017 by Symantec, Thaw...
application delivery
BIG-IP
LTM
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Sep 06, 2018

Because the issue is related to the PKI infrastructure of Symantec, Thawte, GeoTrust and RapidSSL, to be on the safe side I'd generate a CSR to create a completely new certificate/key pair.

 

https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html

 

Since the key is generated by the old PKI infrastructure I'm not even sure it will work to use the same key but with the new certificate. Correct me if I'm wrong. :)