For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Aug 10, 2009
You can also use custom SNMP traps to do this, since there is a message you can capture from /var/log/ltm warning about cert expiration.

The procedure is explained in SOL3727:

https://support.f5.com/kb/en-us/solutions/public/3000/700/sol3727.html Click here

My entry in the user_alert.conf file looks like this: 

 
 alert EXPIRING_SSL_CERT "Certificate (.*) in file (.*) will expire on (.*)" { snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.500" }

The OID is "made up" according to the SOL.

Denny