Let's Encrypt on a Big-IP
Problem this snippet solves:
It is now possible to make use of Let's Encrypt certificates and maintain them on the Big-IP.
Code :
http://wiki.lnxgeek.org/doku.php/howtos:let_s_encrypt_-_how_to_issue_certificates_from_a_bigip
Published Dec 12, 2015
Version 1.0lnxgeek
MVP
Joined July 21, 2008
lnxgeek
MVP
Joined July 21, 2008
- Just send your updates to me at: domingo at domingo dot dk. Thanks!
- HannesNimbostratusI updated the scripts to be working with v11.4, where should I send the tweaks to include them in the howto?
- I've only tested it on v.12.0. Which version are you running?
- HannesNimbostratusWhat version of bigip is this made for? The tmsh modify command which changes the certificates fails on my device. we are running v11.4.0
- You're welcome :-) Please send me your tweaking, then I will update the script.
- J_SloanNimbostratusThanks for pulling this together, set this up on my lab appliance and it's working well so far. the hook script needs tweaking to use the BASE_DIR variable instead of /root/certs, other than that it worked great out of the gate. (I think the fullchain.pem statement is obsolete now also btw)