Forum Discussion
Ohge_15615
Nimbostratus
Jul 11, 2011ClientSSLProfile cert exiration date?
I am looking for a way to get the expiration dates of Client SSL Profile certificates. Currently I am able to get a list of the certs from polling GetInterface("LocalLB", "ProfileClientSSL")->get_cert...
John_Gruber_432
Jul 11, 2011Historic F5 Account
The expiration information is part of the certificate. The iControl functions are there to manage the placement of the certificates on the BIG-IP and building SSL profiles with them.
You could use iControl to download the all certificate files and then decode the certificates looking at their expiration dates off box.
Alternatively, openssl is on the BIG-IP and can read the certificates. You could do a tmsh report and email it to youself in a cron job on the BIG-IP.
http://devcentral.f5.com/wiki/default.aspx/tmsh/CertificateReport.html
Lastly, Enterprise Manager does this for you if you are looking for a canned solution.
Hope that helped.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects