AltostratusHey everyone, I am trying to write a python script (using SDK: f5-common-python) that will generate a CSR, request an SSL Certificate by Sectigo and that will be automatically renewed through F5 when it expires. However, I have read the documentation (https://pythonhosted.org/f5-sdk/index.html) and can't quite find out how this can be achieved. Can anyone help?
Hello Silver_back,
You can create a CSR and send a request to get an SSL certificate using a regular Linux script.
After you get your final cert, you can use F5-SDK to upload that certificate to the device and install it.
AltostratusThank Dario for your reply.
I found out that what I am trying to achieve could also be done with certificate order manager, however, the SSL certificate must be configured with certificate order manager, it would arrange to get the SSL certificate from a specified certificate authority and automatically renew when it expires. However am having trouble finding the CLI command to configure certificate with certificate order manager. Do you perhaps know the commands?
You can try with this:
https://clouddocs.f5.com/cli/tmsh-reference/v15/modules/sys/sys_crypto_cert-order-manager.html
If it helps, pleade don't forget to give some thumbs up or mark it as resolved.
