For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sarodeumesh45's avatar
sarodeumesh45
Icon for Nimbostratus rankNimbostratus
Mar 18, 2024

.pfx certificates monitoring

With respect to below KB article for SSL certificate monitoring, can anyone please suggest how to monitor .pfx certificate in same way??   https://my.f5.com/manage/s/article/K14318 
sarodeumesh45's avatar
sarodeumesh45
Icon for Nimbostratus rankNimbostratus
Mar 25, 2024

Thanks for the response.

Actually i have configured weekly cron job for certificate expiry check & it getting run. But the thing is that, the warning i am getting on GUI (If getting expire in 1 month) for which i am not getting any alerts in this cron job. 

 

Could you please suggest why not getting alerts from expiry cert. Below is what i have configured in weekly cron

 

/usr/bin/tmsh run sys crypto check-cert | logger -p local0.warning
/usr/bin/tmsh -c "cd /; run sys crypto check-cert" | logger -p local0.warning

  • lnxgeek's avatar
    lnxgeek
    Icon for MVP rankMVP
    Mar 25, 2024

    I would run the command manually and see what turns up in /var/log/ltm, or just run them without the pipe to see what they output.

    I'm not sure what happens when you have the certificates in partitions other than Common, I have always used Common for certificates and ssl profiles. When dealing with automation it is just so much easier that way.