For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rishabh_Wangu_3's avatar
Rishabh_Wangu_3
Icon for Nimbostratus rankNimbostratus
Jan 17, 2018

Certificate status on F5

Im using this command tmsh list sys file ssl-cert expiration-string to check the certification status on the BIG-IP 12.1.0   Is there a way by which we can reduce the output so that it only shows...
application delivery
LTM
TMSH
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Jan 18, 2018

Hello Rishabh,

You can use the "check-cert" command. It "examines the expiration date of each certificate stored on the BIG-IP system, including CA bundles. By default, the check-cert command checks for SSL certificates that have expired or will expire within 30 days."

Check this article:

https://support.f5.com/csp/article/K14318

So you can run the following command that gives you expired certificates PLUS certificate expiring in 30 days. If you want to limit it to certificate that will expire in 30 days you can use a simple grep. Like that : 

tmsh run /sys crypto check-cert | grep "expire "

PLease give me a feedback

Regards