Bug ID 1170217: Monthly CA Bundle not removing the certificates which are going to expire

Last Modified: Apr 17, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4

Opened: Oct 11, 2022

Severity: 3-Major

Symptoms

Monthly CA Bundle will trigger every month and upload into F5 downloads. The certificates that will expire before the next month's CA Bundle are still available in the latest CA Bundle.

Impact

The BIG-IP systems report expired certificates.

Conditions

- The BIG-IP systems loaded with the CA bundle that has expired certificates or going to expire before the next CA bundle.

Workaround

Expired certificates can be manually removed from the file prior to importing into BIG-IP.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips