Ask a Question

Advanced Search

Solution ID : SO20401

Last Modified : 05/02/2018

Error: "Import Failed:OpenSSL error:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag"

Problem

The following errors may occur during installation on Big IP F5 version 10.1.0 server:
 
Import Failed:OpenSSL error:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

 

Cause

This error is due to a invalid certificate format.

  • Additional or trailing spaces
  • Installing a certificate format other than X.509

Solution

To resolve this issue: 
 

  • Download the X.509 version of the certificate from the RapidSSL portal, see SO16222
  • Make sure the file has no trail or leading spaces within the certificate file.  The file should look like the example below:
     

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

If any spaces or extra lines exist, please manually delete these extra characters. 
  • Make sure Apache was selected during the enrollment, this will issue an X.509 formatted certificate.
     
If your problem persists, it is recommended to replace your certificate. Refer to  SO5757 for reissue instructions.