Forum Discussion

ccraddock_33000's avatar
ccraddock_33000
Icon for Nimbostratus rankNimbostratus
Feb 18, 2019
Solved

Server cert expired

Dear Dev Central,

 

The certificate I am using for the GUI (server.crt) has expired on one of my LTM devices. Unfortunately all 3 browsers (Chrome, IE/Edge and FF) are rejecting connections to the GUI, thus I cannot import the renewed device certificate via the GUI. I've looked online for ways to do this via CLI but am not coming up with anything useful. I basically just want to import the renewed cert into server.crt. Does anyone have any suggestions for things to try? Im locked out of the GUI until I can get this done.

 

Thanks.

 

LTM
security
  • RaghavendraSY_7's avatar
    RaghavendraSY_7
    Feb 18, 2019

    If you already have a renewed cert copy file this path

     

    /config/httpd/conf/ssl.crt/server.crt (take existing file backup)

     

    then restart httpd and tomcat services.

     

    tmhs restart /sys service httpd tmsh restart /sys service tomcat

     

6 Replies

Sort By
  • RaghavendraSY's avatar
    RaghavendraSY
    Icon for Altostratus rankAltostratus
    Feb 18, 2019

    If you already have a renewed cert copy file this path

     

    /config/httpd/conf/ssl.crt/server.crt (take existing file backup)

     

    then restart httpd and tomcat services.

     

    tmhs restart /sys service httpd tmsh restart /sys service tomcat

     

    • ccraddock_33000's avatar
      ccraddock_33000
      Icon for Nimbostratus rankNimbostratus
      Feb 18, 2019

      Raghavendra,

       

      Thanks so much! After reading your response I immediately understood that would work, basically just using the cp command to overwrite the contents of server.crt with the renewed cert. I really appreciate your quick and accurate response. That worked!

       

      Thanks.

       

  • RaghavendraSY_7's avatar
    RaghavendraSY_7
    Icon for Cumulonimbus rankCumulonimbus
    Feb 18, 2019

    If you already have a renewed cert copy file this path

     

    /config/httpd/conf/ssl.crt/server.crt (take existing file backup)

     

    then restart httpd and tomcat services.

     

    tmhs restart /sys service httpd tmsh restart /sys service tomcat

     

    • ccraddock_33000's avatar
      ccraddock_33000
      Icon for Nimbostratus rankNimbostratus
      Feb 18, 2019

      Raghavendra,

       

      Thanks so much! After reading your response I immediately understood that would work, basically just using the cp command to overwrite the contents of server.crt with the renewed cert. I really appreciate your quick and accurate response. That worked!

       

      Thanks.