Forum Discussion

sarodeumesh45's avatar
sarodeumesh45
Icon for Nimbostratus rankNimbostratus
Mar 18, 2024

.pfx certificates monitoring

With respect to below KB article for SSL certificate monitoring, can anyone please suggest how to monitor .pfx certificate in same way??   https://my.f5.com/manage/s/article/K14318 
sarodeumesh45's avatar
sarodeumesh45
Icon for Nimbostratus rankNimbostratus

Thanks for the response.

Actually i have configured weekly cron job for certificate expiry check & it getting run. But the thing is that, the warning i am getting on GUI (If getting expire in 1 month) for which i am not getting any alerts in this cron job. 

 

Could you please suggest why not getting alerts from expiry cert. Below is what i have configured in weekly cron

 

/usr/bin/tmsh run sys crypto check-cert | logger -p local0.warning
/usr/bin/tmsh -c "cd /; run sys crypto check-cert" | logger -p local0.warning

lnxgeek's avatar
lnxgeek
Icon for MVP rankMVP
Mar 25, 2024

I would run the command manually and see what turns up in /var/log/ltm, or just run them without the pipe to see what they output.

I'm not sure what happens when you have the certificates in partitions other than Common, I have always used Common for certificates and ssl profiles. When dealing with automation it is just so much easier that way.