Bug ID 1170217: Monthly CA Bundle not removing the certificates which are going to expire

Last Modified: Jan 06, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1

Opened: Oct 11, 2022
Severity: 3-Major

Symptoms

Monthly CA Bundle will trigger every month and upload into F5 downloads. The certificates that will expire before the next month's CA Bundle are still available in the latest CA Bundle.

Impact

The BIG-IP systems report expired certificates.

Conditions

- The BIG-IP systems loaded with the CA bundle that has expired certificates or going to expire before the next CA bundle.

Workaround

Expired certificates can be manually removed from the file prior to importing into BIG-IP.

Fix Information

None

Behavior Change