Forum Discussion

matus_c_59161's avatar
matus_c_59161
Icon for Nimbostratus rankNimbostratus
Apr 18, 2013

SSL certificate renewal

Hi Guys,     As in the past (in v10) I've seen the certificate re-import (i.e. overwriting a existing certificate by a new certificate) was not fully transparent to the SSL profile and the re...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 18, 2013
The issue was fixed in 11.0:

 

 

 

sol10561: The BIG-IP system may not use a renewed SSL certificate

 

https://support.f5.com/kb/en-us/solutions/public/10000/500/sol10561.html

 

 

This is the result of a known issue. If you are replacing an expired SSL certificate on the BIG-IP system, and the new certificate name is the same as the existing certificate, the BIG-IP system may not use the new SSL certificate until the configuration is reloaded or the SSL profile(s) is updated.

 

 

F5 Product Development tracked this issue as ID 248109 (formerly CR60320) and it was fixed in BIG-IP version 11.0.0.

 

 

 

Aaron