For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kittipong's avatar
Kittipong
Icon for Nimbostratus rankNimbostratus
Sep 30, 2016

Why F5 don't show the expired certificate in ca-bundle

I run command "tmsh run sys crypto check-cert" on my test F5 but it don't show the expired certificate in ca-bundle. F5 still show other expired certificate. In the ca-bundle have the expired certifi...
application delivery
LTM
Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Oct 03, 2016

tmsh run sys crypto check-cert --Only checks the FIPS module. Your CA bundle is not "saved" on your FIPS module. Therefore, you have to use the GUI to check the bundle, by clicking on it and reviewing what it contains.; also since it is not an individual cert, the GUI will not show which Certs in the bundle are expired, since a bundle is a layered cert list.