Forum Discussion
Greifensteiner
Nimbostratus
NimbostratusExpired client-certificate
Does F5 BIG-IP revoke expired client-certificates automatically? If not, is it possible without iRules/APM? Thanks Christian
JoseLabra
MVP
MVP
Hello
I assume we're talking about an SSL certificate from the client-side SSL profile.
It's not possible. If a certificate is expired, I assume the IT team has already noticed this and uploaded the new SSL certificate, and the change won't take more than 5 minutes. Service validations can take longer depending on the type of service.
Now, it can be automated with REST APIs and Python, but it's a more complex issue, and for automation purposes, it might be a good option.
I'll be happy to answer your questions.
