Generating a Self-Signed Certificate In a real-life environment, you will ideally never use a self-signed certificate in a client SSL profile. Typically, you would import a certificate signed by a public certificate authority or an internal one which is trusted by your clients. However, for this lab we’ll use a self-signed certificate for simplicity’s sake. 1. 2. 3.
Open up a browser session to https://192.168.1.245 and login using the admin credentials. Navigate to System > File Management > SSL Certificate List and in the upper right corner press Create. On the System > File Management > SSL Certificate List > New SSL Certificate page, enter the following configuration:
System > File Management : SSL Certificate List > New SSL Certificate… General Properties Name TestCertificate Certificate Properties Issuer Self Common Name www.testcertificate.com Division Education Organization Test Corp. Locality London Country United Kingdom Subject Alternative Name DNS:www.testcertificate.com Key Properties Size 2048 When done, click Finished It is very important that you include DNS: in the Subject Alternative Name due to a bug in version 12.1.2 documented in the solution article K14753.
Create a Client SSL Profile 1. 2.
Navigate to Local Traffic > Profiles > SSL > Client and in the upper right corner click on Create. On the Local Traffic > Profiles > SSL > Client > New Client SSL Profile… page, add the following configuration:
311 311