Differences

This shows you the differences between two versions of the page.

--- howtos:let_s_encrypt_-_how_to_issue_certificates_with_cloudflare_dns_and_f5_rest_api [26/02/2022 13:01] – [Configuration] domingo
+++ howtos:let_s_encrypt_-_how_to_issue_certificates_with_cloudflare_dns_and_f5_rest_api [27/02/2022 17:23] – [Configuration] domingo
@@ Line 44: / Line 44: @@
   * KEY_ALGO=rsa
   * CONTACT_EMAIL=someone@example.com
+  * PREFERRED_CHAIN="ISRG Root X1"
+I had to specify the "PREFERRED_CHAIN" variable due to some Android quirks and the expired "DST Root CA X3" root. For a more detailed explanation look here [[https://ikarus.sg/lets-encrypt-dot-android/|Let's Encrypt and DNS over TLS Hell on Android]]
 I have to use RSA certificates due to some SNI limitations in the F5 configuration. If you want to run EC certificates the script works just as well.
@@ Line 84: / Line 87: @@
 If all goes well you should end up with a set of certificates and client ssl profiles called "auto_<domain>" on your Big-IP installation.
-Note that the script only maintains the certificates and profiles, you still need to assign them to the actual virtual servers.
+Note that the script only maintains the certificates and profiles, you still need to assign them to the actual virtual servers to put them into effect.