Forum Discussion

yunan_haris

Altocumulus

Sep 27, 2022

check status of the ssl certificate on f5 using rest api

greetings all,

is there any way to check the ssl certificate status, validation, expiration date using rest api on the bigip?

thank you

forget to add your cert expiry output will be like

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}

Samir
MVP
Sep 27, 2022
As such there is no direct RestAPI commnd but you can customise based on your requiremnt. Like tmsh there is comamnd to retrive the cert name n cert validity.

tmsh list sys crypto cert

RestAPI you can try something like below.
curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'

Hope it will help you
- Samir
  MVP
  Sep 29, 2022
  forget to add your cert expiry output will be like
  curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}' { "certname": "/Common/abc_host_certJuly2022", "CertExpiry": "Jul 14 17:11:26 2021 GMT" }
  - yunan_haris
    Altocumulus
    Oct 11, 2022
    hi Samir
    thank you, it works
- yunan_haris
  Altocumulus
  Sep 28, 2022
  hi Samir
  thank you for your reply, actually my customer has ask me about the rest api to detect the certificate expiration using ansible, because of that i need command to check regarding this.