For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

benoit_9199's avatar
benoit_9199
Icon for Nimbostratus rankNimbostratus
May 04, 2015

Uploading/creating SSL cert+key using iControlREST

Hi,   The documentation available seem to say that to actually add an SSL private key and certificate to BigIP using tmsh you need to generate them somewhere and manually copy them to /config/ssl...
application delivery
devops
iControl
iControlREST
LTM
management
ssl
benoit_9199's avatar
benoit_9199
Icon for Nimbostratus rankNimbostratus
May 05, 2015

Well, after asking F5 support it is a referenced bug ID489843: "A GET on some file object configurations (for example tm/sys/crypto/key) does not return all of the properties of the file object."

And the expected way to use it will be:

POST //mgmt/tm/sys/crypto/key HTTP/1.1
Host: 10.208.102.28
Authorization: Basic YWRtaW46YWRtaW4=
Content-Type: application/json
Cache-Control: no-cache

{ "name":"test001", "options":[{"get-csr":"test001"}], "common-name":"rest.test.com" }
  • mayouche_162667's avatar
    mayouche_162667
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2016
    Hi, I was able to create a key using rest api calls, but i'm unable to generate the CSR. Could you please clarify whether this is a known f5 bug?
  • benoit_9199's avatar
    benoit_9199
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2016
    Well, actually i opened a case last week for this exact problem. i'll keep you posted on the results
  • benoit_9199's avatar
    benoit_9199
    Icon for Nimbostratus rankNimbostratus
    Apr 12, 2016
    Apparently the whole command is buggy, you should contact your support representative and make them aware you are facing this bug so it get the maximum attention possible: ID 511582 iControl REST - Get error msg when creating "sys crypto csr" object, but it does get created.