Forum Discussion
NimbostratusUpload SSL keys/certs via iControl REST API?
Is there a PUT method (but I'll take a POST!) to upload SSL keys/certs into BigIP LTM 11.5? Im moving from ancient 9.4 code and would love to be able to pull down my keys and certs and upload them via REST to 11.5. I was going to just scp them up to the filestorage location within 11.5 and update bigip.conf but it appears that something internally appends a generated number when importing keys/certs via the UI provide copy/paste.
6 Replies
dfosborne2_2224Ok, well I found a doc where, via, tmsh I created the key/cert (scp'd them into /config/ssl/ssl.{key,crt} ) and then also created the client-ssl profile for that cert. Pretty sure I can translate those commands into something via REST.- Kevin_Stewart
Employee
-
Upload the certs and keys to the BIG-IP - some temporary directory will do.
-
REST call to create certificate and key:
curl -sk -u admin:admin -H "Content-Type: application/json" -X POST https://x.x.x.x/mgmt/tm/sys/crypto/cert -d '{"command":"install","name":"test","from-local-file":"/var/tmp/test.crt"}' curl -sk -u admin:admin -H "Content-Type: application/json" -X POST https://x.x.x.x/mgmt/tm/sys/crypto/key -d '{"command":"install","name":"test","from-local-file":"/var/tmp/test.key"}' -
Create the client SSL profile:
curl -sk -u admin:admin -H "Content-Type: application/json" -X POST https://x.x.x.x/mgmt/tm/ltm/profile/client-ssl -d '{"name":"test","cert":"test.crt","key":"test.key"}'
-
- JRahm
Admin
@CgKades, yes you can. Here's some sample code in python to upload files to BIG-IP.
kchristidis_249Hi all, is there a way to download/export the actual Key / Certificate files from BIG-IP, using the iControl REST?
tlian_321947With from-url pointing the file location, How to pass credential (username and password) as the URL location is a protected resource and required authentication?
Phanish_342711Hi all,is anyone aware of loading certs on appliances like IBM DataPower from Venafi over REST??Could you please let me know of the way to do it
