Forum Discussion

John_45699's avatar
John_45699
Icon for Nimbostratus rankNimbostratus
Jun 01, 2010

Wildcard Certificates

Have an LTM running BIG-IP 9.3.1 Build 81.1 and am trying to import a wildcard certificate (*.domain.com). I generated the CER on the LTM. This process created the private key. Now, when I try to import the certificate I received from VeriSign, I get a certificate/key mismatch error. Are wildcard certs supported on the LTM?

 

config
design
  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    Jun 01, 2010
    Yes. Wildcard SSL Certificates are supported from v9.0.x to v10.1.x.

     

     

    This is a solution that specifically includes v9.3.1 as capable of utilizing Wildcards (This Solution only covers the CSR Generation):

     

    SOL6823: Configuring multiple HTTPS sites on the same SSL client profile by creating a wildcard certificate request:

     

    https://support.f5.com/kb/en-us/solutions/public/6000/800/sol6823.html

     

     

    You might want to verify that your Certificate Store doesn't contain multiple Keys from previous attempts to generate a CSR to submit to your CA.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 02, 2010
    Also, you can use Openssl to verify a cert and key match:

     

     

    https://support.f5.com/kb/en-us/solutions/public/6000/700/sol6746.html

     

     

    Aaron