Forum Discussion

dariuszk's avatar
dariuszk
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Problem creating wildcard ssl profile with tmsh

Hi,

 

I'm trying to create a client ssl cert using tmsh and am running into a bit of an issue.

 

I'm trying to post this:

 

tmsh create ltm profile client-ssl STAR.DUMMYHOST.COM_CLIENT-SSL { app-service none cert ".dummyhost.com_2015-11-13.crt" cert-key-chain add { ".dummyhost.com_2015-11-13" { cert "*.dummyhost.com_2015-11-13.crt" chain Trustedcert.crt key ".dummyhost.com_2015-11-13.key" } } chain Trustedcert.crt.crt defaults-from clientssl key ".dummyhost.com_2015-11-13.key" passphrase none}

 

and I'm getting this error message: Syntax Error: the "create" command does not accept wildcard configuration identifiers

 

Would seem to me that because my ssl cert is starting with '', tmsh is unable to read the '' as part of the name and is under the impression its a wildcard. So I tried using '\' as escape char in front of every '*' as well as not using the quotes to no avail.

 

Any help would be appreciated.

 

BIG-IP
devops
LTM

1 Reply

Sort By
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 18, 2015

    The only thing in a wildcard cert that needs a wildcard () is the CN value. The certificate file name, and the LTM certificate objects should not have a star () in the name.