For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

noc_206710's avatar
noc_206710
Icon for Nimbostratus rankNimbostratus
Aug 25, 2015

How to identify SHA-1 certificates

I was asked to identify all SHA-1 certificates terminating ssl on our LTMs so we can mint and replace with SHA-256 certs. How do I identify SHA-1 certificates on the LTM (11.4.1)?  
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 25, 2015

This script will list all of the SHA1 certificates installed on an 11.3+ system:

!/bin/bash

for c in `ls --format single-column /config/filestore/files_d/Common_d/certificate_d/`;
do
    arr=($(openssl x509 -noout -text -in /config/filestore/files_d/Common_d/certificate_d/${c} |grep -E "sha1"))

    if [ -n "${arr[2]}" ]
    then
        echo ${c}
    fi

done