For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ohge_15615's avatar
Ohge_15615
Icon for Nimbostratus rankNimbostratus
Jul 11, 2011

ClientSSLProfile cert exiration date?

I am looking for a way to get the expiration dates of Client SSL Profile certificates. Currently I am able to get a list of the certs from polling GetInterface("LocalLB", "ProfileClientSSL")->get_cert...
dev
devops
iControl
John_Gruber_432's avatar
John_Gruber_432
Historic F5 Account
Jul 11, 2011
The expiration information is part of the certificate. The iControl functions are there to manage the placement of the certificates on the BIG-IP and building SSL profiles with them.

 

 

You could use iControl to download the all certificate files and then decode the certificates looking at their expiration dates off box.

 

 

Alternatively, openssl is on the BIG-IP and can read the certificates. You could do a tmsh report and email it to youself in a cron job on the BIG-IP.

 

 

http://devcentral.f5.com/wiki/default.aspx/tmsh/CertificateReport.html

 

 

Lastly, Enterprise Manager does this for you if you are looking for a canned solution.

 

 

Hope that helped.