Forum Discussion

Skuba_85554's avatar
Skuba_85554
Icon for Nimbostratus rankNimbostratus
Jul 14, 2009

new CA bundle

hi

 

 

is there a way of creating your own certificate authority bundle?

 

 

the reason being that i want to authenticate clients for a single virtual server against 3 specific internal certificate authorities only

 

 

thanks
config
design

2 Replies

Sort By
  • Skuba_85554's avatar
    Skuba_85554
    Icon for Nimbostratus rankNimbostratus
    Jul 14, 2009
    i've figured out how to do this, by importing the certificates (via the gui) on to big ip, then connecting to big ip using ssh and running cat cert1.crt cert2.crt > certbundle.crt

     

     

    thanks
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jul 15, 2009
    Yep...

     

     

    SOL6401: Configuring the BIG-IP to use an intermediate or chain certificate with a clientssl profile

     

    https://support.f5.com/kb/en-us/solutions/public/6000/400/sol6401.html

     

     

    SOL10167: Overview of the ClientSSL profile

     

    https://support.f5.com/kb/en-us/solutions/public/10000/100/sol10167.html

     

     

    Aaron