Forum Discussion
NimbostratusBIG-IP GTM logs seeing false SNMP trap everyday about cert expiry when an SSL certificate still valid
BIG-IP GTM logs seeing false SNMP trap everyday when an SSL certificate still valid
May 15 04:10:45 XXXXXXX alert big3d[8397]: 012b600f:1: SNMP_TRAP: SSL cert from IP ::xxxx:x.x.x.x:xxxx WILL EXPIRE on Jun 9 07:46:22 2017 GMT
SSL certificate '/config/ssl/ssl.crt/dtca-bundle.crt' has the expiration date Fri Jun 9 07:46:22 2017 from IP xxxx:x.x.x.x:xxxx( f5 Enterprise manager). But when we checked on the device , certificate are valid and will expiry on 2022.
Need to know if any related bug, why we seeing those false alerts. We have 3 GTMs, on all of them we see above false traps.
it seems quite opposite to article https://support.f5.com/csp/article/K14395
Leonardo_SouzaCirrocumulus
Have a look in this solution:
https://support.f5.com/csp/article/K15597
I don't agree with the idea here. It should try to renew first, if fails, then alert the user. Anyway, EM will be replaced by BIG-IQ, somewhere in the future.