sslvpn & Imperva Securesphere - private key issue

[stine_]

I have a question: Is it possible to export the server certificate and private key from an SA-2500 running 6.3R2 (build 13725)?

I need to be able to load both the cert and the private key into an Imperva Securesphere WAF so that the WAF can decode the ssl traffic.

Is it a matter of creating a CSR on the sslvpn and loading it into my laptop (with openssl), using my laptop as the CA, and importing the new .crt file into the sslvpn box, and then using openssl, extracting both they key and the cert from the files on my laptop CA? Or am I mistaken?

Thanks

Theodore E Van Iderstine

[ruc_ · Accepted solution]

If you generated the CSR on the SA then you can't extract the private key. If you need to import the cert and private key on another device then you will have to generate the CSR on an external device (example: any PC with open SSL installed) and then import the cert and private key into both the SA and other device that you wish to.

[stine_]

Thanks