Forum Discussion

yunan_haris's avatar
yunan_haris
Icon for Altocumulus rankAltocumulus
Sep 27, 2022

check status of the ssl certificate on f5 using rest api

greetings all,

is there any way to check the ssl certificate status, validation, expiration date using rest api on the bigip?

thank you

api
application delivery
devops
f5
LTM
ssl
  • Samir's avatar
    Samir
    Sep 29, 2022

    forget to add your cert expiry output will be like

    curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}
  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    Sep 27, 2022

    As such there is no direct RestAPI commnd but you can customise based on your requiremnt.  Like tmsh there is comamnd to retrive the cert name n cert validity. 

     

    tmsh list sys crypto cert

     

    RestAPI you can try something like below. 

    curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'

     

     

     Hope it will help you

    • Samir's avatar
      Samir
      Icon for MVP rankMVP
      Sep 29, 2022

      forget to add your cert expiry output will be like

      curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}
    • yunan_haris's avatar
      yunan_haris
      Icon for Altocumulus rankAltocumulus
      Sep 28, 2022

      hi Samir

      thank you for your reply, actually my customer has ask me about the rest api to detect the certificate expiration using ansible, because of that i need command to check regarding this.