Step 1 :
Copy the designated website ssl certificate and key files to the tmp folder
SSL cert location:
/config/filestore/files_d/<partition>_d/certificate_d/
Key location:
/config/filestore/files_d/<partition>_d/certificate_key_d/
Step 2 :
Impact of procedure: There will be no impact to the system with the below procedure.
- Log in to the BIG-IP command line.
- Copy the certificate file to the /var/tmp directory
cp /config/filestore/files_d/Common_d/certificate_d/<Certificate-Filename> /var/tmp/<Destination-Filename>
3. Copy the key file to the /var/tmp directory
cp /config/filestore/files_d/Common_d/certificate_key_d/<Key-Filename> /var/tmp/<Destination-Filename>
4. verify the files using the below command
ls -las /var/tmp/<Destination-Filename>
Step 3 :
To export the certificate/key pair to PFX format, perform the following procedure:
Export the certificate/key pair to PFX format to /var/tmp/certificate.pfx using the following command syntax:
openssl pkcs12 -export -out /var/tmp/<PFX -CertificateName> -inkey /var/tmp/<Key-Filename> -in /var/tmp/<Certificate-Filename>
For example, to export the certificate test.crt and key test.key copied in the previous procedure, type the following command:
openssl pkcs12 -export -out /var/tmp/certificate.pfx -inkey /var/tmp/test.key -in /var/tmp/test.crt
The exported PFX file is named /var/tmp/certificate.pfx.