Forum Discussion

NzYme_68513's avatar
NzYme_68513
Icon for Nimbostratus rankNimbostratus
Apr 13, 2011

.pem format has to be used for SSL offload?

Trying to setup test scenario for CAS server load balancing on our F5 LTM. We created a test domain with a CA server. We created certificate(.cer) but according to the deployment .pdf for exchange 2...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Apr 13, 2011
In 10.2 or so, you can import a PKCS7 cert/key via the SSL certificates page in the GUI. They'll be converted to PEM format. Is your .cer cert/key a DER format? If so, you can use openssl on LTM or off the box to convert:

 

 

DER

 

openssl x509 -inform der -in certificate.cer -out certificate.pem

 

 

PCKS12

 

openssl pkcs12 -in certificate.pfx -nodes -out certificate.pem

 

 

For more info, you can search on AskF5.com for convert certificate or search online for openssl convert certificate.

 

 

If you'd like to see the GUI handle this more gracefully, you could open a case with F5 Support and request an enhancement.

 

 

Aaron