Forum Discussion

DC_Jordan_18536's avatar
DC_Jordan_18536
Icon for Nimbostratus rankNimbostratus
Sep 01, 2015

SSL offload - pfx certificate

I import pfx certifcate in f5 and it is included certificate and key , when associate this certifcate ((client ssl)) site is not working (when i removed from virtual server under client ssl , site is...
application delivery
ASM Advanced WAF
LTM
security
DC_Jordan_18536's avatar
DC_Jordan_18536
Icon for Nimbostratus rankNimbostratus
Sep 01, 2015

Thanks again , so for server ssl , i will go under virtual server and add server ssl and add default profile,is that right?!?

 

I will try tomorrow to export x.pfx as you mentioned above .

 

I have question if i am not include chain , this will make problems?!?

 

If iam i am used x.pfx without check your option and use inermediate ca that provided by symantic , is that right?!?

 

So i do not need to useopenssl to convert x.pfx to cert and key , is that right?

 

I am so sorry if i am asking a lot

 

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Sep 01, 2015
    yes, default serverssl profile. You need the chain in some way on the F5 in the clientssl profile or else users will get errors. If you only export the cert and key in the pfx you can add the intermediate in the "chain" drop down in the clientssl profile. No you do not need to convert the pfx. F5 can natively import the pfx.