Bug ID 691095: CA bundle manager loses certificates in the CA bundle if the serial number is longer than 4 bytes

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3

Fixed In:
14.0.0, 13.1.0.4

Opened: Oct 27, 2017

Severity: 2-Critical

Symptoms

CA certificates with long but different serial numbers are treated identical and duplicate, thus get lost in the CA certificate merge operation. Only one would be left.

Impact

Certificates with large serial numbers are treated as duplicate, and removed.

Conditions

- The CA bundle file is managed by the CA bundle manager. - The file contains certificates with large serial numbers.

Workaround

There is no workaround at this time.

Fix Information

Large serial numbers are treated correctly.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips