F5 Sites
  • F5.com
  • LearnF5
  • NGINX
  • MyF5
  • Partner Central
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. CrowdSRC
  3. CodeShare

Let's Encrypt on a Big-IP

Problem this snippet solves: It is now possible to make use of Let's Encrypt certificates and maintain them on the Big-IP. Code : http://wiki.lnxgeek.org/doku.php/howtos:let_s_encrypt_-_how_to_iss...
Published Dec 12, 2015
Version 1.0
automatic renew certificates
BIG-IP
certificate automation
certificate management
Let's Encrypt
lnxgeek's avatar
lnxgeek
Icon for MVP rankMVP
Joined July 21, 2008
View Profile
lnxgeek's avatar
lnxgeek
Icon for MVP rankMVP
Joined July 21, 2008
View Profile
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 28, 2017

Hi,

it seems the link changes. I found the documentation on this URL:

http://wiki.lnxgeek.org/doku.php/howtos:let_s_encrypt_-_how_to_issue_certificates_from_a_bigip

Thank you lnxgeek for this solution. it is very helpful!

I had some difficulties to understand how to what to do with all these files, so I here is a little installation guide:

  1. Create the data group
  2. Copy irule and assign it to the HTTP virtual server which destination address is resolved for each elements in domains.txt
  3. Create the directory /shared/letsencrypt (it is used in call). all files may be created in this directory
  4. Create /shared/letsencrypt/domains.txt
  5. Create the script to create profiles (I called it create-profiles.sh)
  6. Create config, wrapper.sh, send_mail from code
  7. Retrieve dehydrated from Lukas Schauer github
  8. Make all script executable :
    chmod 755 hook.sh wrapper.sh send_mail dehydrated create-profiles.sh
  9. Create /var/www/dehydrated directory :
    mkdir /var/www/dehydrated
  10. Accept let encrypt terms of license
    ./dehydrated --register --accept-terms
  11. execute the script to create certificate
    ./dehydrated -c
  12. Assign clientssl profiles
  13. Install an iScript

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesF5 CertificationLearnF5 Training

SUPPORT

Manage SubscriptionsProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

F5 logo©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information