Forum Discussion

john_ges's avatar
john_ges
Icon for Nimbostratus rankNimbostratus
Sep 15, 2015

In a custom Client SSL profile what is the purpose of the PassPhrase box?

When the server guys supply certificates to us they also provide a password. The password is needed to successfully import the cert into the F5. When I build a client SSl profile for an App there is also a PassPhrase box and we enter that password in the PassPhase box. My question is do I really need to enter that password in the client ssl profile? What is it used for? The last profile I built I purposely left off the PassPhrase and the VIP still worked. Can you clarify this for me? Thanks.

 

application delivery
client ssl profile
deployment
LTM

3 Replies

Sort By
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Sep 15, 2015

    When you import the cert and key, I'm assuming you do so as a p12/pfx file? That password is to unlock the pkcs12 encryption to allow the cert and key to be exported as PEM.

     

    The passphrase option in the SSL profile is if the key is still encrypted (which it rarely ever is).

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Sep 16, 2015

    I wouldn't call it a best practice as much as a requirement, or lack thereof. If your private keys aren't encrypted and require a passphrase, then you don't need the passphrase in the SSL profile.