Forum Discussion
NimbostratusSSL Offloading weblogic server error
Dears, Im to offload ssl for a weblogic application , the admin gave me a cert file and a pem file, I exctracted the key from the pem and put it in .key file , now i recive the follwoing error when I do the SSL profile , the admin gave me a password which is required, so how to solve this issue and how to add this password if its needed. 01070313:3: Error reading key PEM file /config/filestore/files_d/Common_d/certificate_key_d/:Common:GIS_KEY.key_48885_1 for profile /Common/GIS_CLIENT_SSL: error:0906A068:PEM routines:PEM_do_header:bad password read
5 Replies
- Kevin_Stewart
Employee
A PEM should be clear text, base64-encoded data. What does the certificate and PEM text file look like if you open them with a text editor?
Hamada_Tabosha_both of them are clear text, I solve the issue by entering the pass phrase. it offloads the https (client side offload) but it appear that the certivicate is invalid , i think this is because it contain information about the server itself not the F5 , is this will error will not appear if i did the server side offload ?
ALso I'm using a an Irule to redirect the page as the following : when HTTP_REQUEST {
switch -glob [HTTP::path] { "/" { HTTP::redirect "http://gis.moe.gov.sa/gis/faces/default" }
} }
but also i need irule to redirect the http request to be https in the server side
kindly ur support
- Kevin_Stewart
If you open up the certificate, you should a bunch of base64-encoded text with header and footer strings of BEGIN CERTIFICATE and END CERTIFICATE . The private key should look similar but have the header BEGIN RSA PRIVATE KEY . Is that what you see?
- Hamada_Tabosha_
yes its
- Kevin_Stewart
I solve the issue by entering the pass phrase. it offloads the https (client side offload) but it appear that the certivicate is invalid , i think this is because it contain information about the server itself not the F5 , is this will error will not appear if i did the server side offload ?
Okay, let's level set. You've applied a client SSL profile and that seems to be able to offload the client side HTTPS/SSL traffic, correct? Does the server side also require HTTPS/SSL? And if so, do you have a server SSL profile applied to the VIP?
ALso I'm using a an Irule to redirect the page as the following [iRule] but also i need irule to redirect the http request to be https in the server side
If the server side requires HTTPS/SSL, then you simply need a server SSL profile.
