Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Jan 26, 2015

copying certs in /config/filestore/files_d/Common_d/certificate_d/

After copying a bunch of certs that I upload and created chains and profiles to another ltm in the same directory, the certs do no appear when I check in System ›› File Management : SSL Certificate List file directory on the target LTM.

 

I restarted apache and tomcat as well big3d but no luck the files that I scp'ed over do no appear when navigating to the section in the web utitly.

 

They do appear in the /config/filestore/files_d/Common_d/certificate_d/ directory on the targeted machine. Is there a reason why the certs do not appear ?

 

2 Replies

  • Copying in filestore in not enough. You have to import them in order to create the index.

     

    From the CLI or from the GUI.

     

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus

    You have to load them in order for them to appear. The files are referenced via the config file. It's not a dynamic check of the FS. I would recommend copying them to a temp dir (keys to /tmp/keys/* and certs to /tmp/certs/*) then you could write a quick script to reference all the objects for loading.

    install sys crypto key object_name from-local-file /path/to/keyfile
    install sys crypto cert object_name from-local-file /path/to/certfile
    

    from-url is also an option, if you key your keys/certs somewhere your BigIP has access too.