Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Mar 26, 2015

ssl offloading question

Hey guys,

 

Silly question not sure why I am guessing myself here. But, on the LTM the ssl profile - client and in the certificates that get uploaded to the ltms, they contain only the private key and cert correct ? and there is no public that gets stored on the LTM ?

 

Thanks

 

cet
private key
public key
ssl
termination

6 Replies

Sort By
  • DEJ_159363's avatar
    DEJ_159363
    Icon for Cirrus rankCirrus
    Mar 26, 2015

    Hello,

     

    Your generic client profile SSL is made up of the basic four settings/items: server cert, server key (private key), ca chain, defaults-from.

     

    Take Care

     

    • bigipjr28_13978's avatar
      bigipjr28_13978
      Icon for Nimbostratus rankNimbostratus
      Mar 26, 2015
      In general, the certificates that get uploaded to the ltms..the keys that get created from the cert. In the key tab I think when viewing the certificate..is that the public or private key? I thought the f5 only holds the private key?
  • DEJ's avatar
    DEJ
    Icon for Nimbostratus rankNimbostratus
    Mar 26, 2015

    Hello,

     

    Your generic client profile SSL is made up of the basic four settings/items: server cert, server key (private key), ca chain, defaults-from.

     

    Take Care

     

    • bigipjr28_13978's avatar
      bigipjr28_13978
      Icon for Nimbostratus rankNimbostratus
      Mar 26, 2015
      In general, the certificates that get uploaded to the ltms..the keys that get created from the cert. In the key tab I think when viewing the certificate..is that the public or private key? I thought the f5 only holds the private key?
  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Mar 26, 2015
    when you say public are you referring to the public intermediates and roots or your public key(certificate)?
  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Mar 26, 2015

    When viewing the "key" of the cert, that is the private key. When viewing the "certificate", that is your public key. Keys(Private key) does not get generated by the cert(public key), its the other way around. You generate a private key. Then you create a CSR using that private key to request a corresponding public key to be issue from a CA(certificate authority).