Let's Encrypt on a Big-IP
Problem this snippet solves:
It is now possible to make use of Let's Encrypt certificates and maintain them on the Big-IP.
Code :
http://wiki.lnxgeek.org/doku.php/howtos:let_s_encrypt_-_how_to_issue_certificates_from_a_bigip
Published Dec 12, 2015
Version 1.0lnxgeek
MVP
Joined July 21, 2008
lnxgeek
MVP
Joined July 21, 2008
96 Comments
- Just send your updates to me at: domingo at domingo dot dk. Thanks!
- Hannes
Nimbostratus
I updated the scripts to be working with v11.4, where should I send the tweaks to include them in the howto? - I've only tested it on v.12.0. Which version are you running?
- Hannes
Nimbostratus
What version of bigip is this made for? The tmsh modify command which changes the certificates fails on my device. we are running v11.4.0 - You're welcome :-) Please send me your tweaking, then I will update the script.
- J_Sloan
Nimbostratus
Thanks for pulling this together, set this up on my lab appliance and it's working well so far. the hook script needs tweaking to use the BASE_DIR variable instead of /root/certs, other than that it worked great out of the gate. (I think the fullchain.pem statement is obsolete now also btw)
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)