Forum Discussion

Altocumulus

3 years ago

Solved

check status of the ssl certificate on f5 using rest api

greetings all, is there any way to check the ssl certificate status, validation, expiration date using rest api on the bigip? thank you

3 years ago

forget to add your cert expiry output will be like

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}

Samir

MVP

3 years ago

As such there is no direct RestAPI commnd but you can customise based on your requiremnt. Like tmsh there is comamnd to retrive the cert name n cert validity.

tmsh list sys crypto cert

RestAPI you can try something like below.

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'

Hope it will help you

Samir

MVP

3 years ago

forget to add your cert expiry output will be like

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}