[prev in list] [next in list] [prev in thread] [next in thread] 

List:       loadbalancing-l
Subject:    RE: [load balancing] F5 BigIP SSL Certificate Import Question
From:       "Brian DeGeeter" <b.degeeter () F5 ! com>
Date:       2005-07-14 16:25:49
Message-ID: D21DA3C47E71114583C3EC4B0CCB9A9901F57E0E () exchfive ! olympus ! f5net ! com
[Download RAW message or body]

You just need to copy the .pfx to the bigip then split it up into two
files:
 
 openssl pkcs12 -in file.pfx -out new_file.pem -passin pass:password
-nodes

Then just split output file to a .key and a .crt and put it in the
appropriate BigIP directories.

cheers,

-Brian

________________________________

From: owner-lb-l@vegan.net [mailto:owner-lb-l@vegan.net] On Behalf Of
Chris Bond
Sent: Thursday, 14 July, 2005 8:23 AM
To: lb-l@vegan.net
Subject: RE: [load balancing] F5 BigIP SSL Certificate Import Question


If you find a solution for this can you let me know too as we're about
to have the same issue!


________________________________

	From: Angelo McComis [mailto:AMcComis@centurysurety.com] 
	Sent: 14 July 2005 2:52 PM
	To: lb-l@vegan.net
	Subject: [load balancing] F5 BigIP SSL Certificate Import
Question
	
	

	Hi... I'm new to the list, but I've scanned the archives for
this first and came up empty. 

	I have an existing single-server site, IIS6, with a Thawte SSL
certificate. 

	I'm planning to use a BigIP LTM 1500 and use it to offload the
SSL. 

	I've read that BigIP doesn't support "IIS certificates" -- but
the cert I have is a .pfx file. I have the password for the "private
key" to it, so I can manipulate it, export it, etc.

	Is what I have acceptable to use on the BigIP or do I need to go
back to Thawte and reissue it in another format? 

	Best regards, 
	Angelo 




	        

	This message and any attachments are intended only for the use
of the individual or entity to which it is addressed and may contain
information that is confidential or is otherwise the exclusive property
of the sender or the intended recipient. If the reader of this message
is not the intended recipient, or the employee or agent responsible for
delivering the message to the intended recipient, you are hereby
notified that any dissemination, distribution, forwarding, or copying of
this communication is prohibited. If you have received this
communication in error, please notify the sender by e-mail or telephone,
and delete the original message immediately. 	


____________________
The Load Balancing Mailing List
Unsubscribe:    mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
Archive:        http://vegan.net/lb/archive
LBDigest:       http://lbdigest.com
MRTG with SLB:  http://vegan.net/MRTG
Hosted by:	http://www.tokkisystems.com

[prev in list] [next in list] [prev in thread] [next in thread]