02-29-2012 11:20 AM
I have been uploading PEM certs for some time with no issue...using the following basic config
ssl-proxy service CERT
key mykey.pem
cert mycertt.pem
However I just uploaded a pcsk12 file and it appeared to upload fine
under
#sh crypto file
myfirstpcsk12.pcsk12 4998 PKCS12 Yes BOTH
ssl-proxy service MYFIRSTPCSK
cert myfirstpcsk12.pcsk12
under class
class customer-vip
loadbalance vip inservice
loadbalance policy customer -l7slb
loadbalance vip icmp-reply active
nat dynamic 1 vlan 44
However when I try to associate the class w/ the proxy server i get the following error
(config)# policy-map multi-match VIP
(config-pmap)# class customer-vip
(config-pmap-c)# ssl-proxy server MYFIRSTPCSK
Error: ssl-proxy doesn't have a valid key/cert, cannot use it.
I'm not sure why im getting that error..
the sho crypto file output appears finfe
Solved! Go to Solution.
03-01-2012 12:11 AM
Hi,
When using PKCS12 certificates, you need to configure the same file name for both cert and key under the ssl-proxy. Can you please give it a try?
I hope this helps
Daniel
03-01-2012 12:11 AM
Hi,
When using PKCS12 certificates, you need to configure the same file name for both cert and key under the ssl-proxy. Can you please give it a try?
I hope this helps
Daniel
03-05-2012 01:40 PM
that was it..
thx!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide