Forum Discussion
CirrocumulusHow to monitor device trust certificate expiry ?
MVPHi Blue_whale,
try (filename might be different in your case, not _59522_2 but different numbers):
[root@ltm:Active:Standalone] ~ # curl -sku admin:P@$$w0rd! https://localhost/mgmt/tm/util/bash \
-H "Content-Type: application/json" -X POST \
-d "{\"command\":\"run\", \"utilCmdArgs\": \"-c 'openssl x509 -text -in /config/filestore/files_d/Common_d/trust_certificate_d/\:Common\:dtdi.crt_59522_2'\"}" \
| sed 's/\\n/\n/g' | grep "Not After"Output should look like this:
Not After : Oct 20 10:15:48 2034 GMTCredits go to this post: Rest API - Device certificate URL | DevCentral
Cheers
Daniel
CirrocumulusHi Daniel_Wolf ,
Thank you for the command .. I would like to know if these commands just show the output once or it helps to generate any alert ?
We would like to get the alert .
Our monitoring tool is able to generate the alert for device certificate expiry but not for the Device trust certificate .
For device certificate expiry we use snmp OID - certsExpiration': '.1.3.6.1.4.1.3375.2.100.1.0
Do we have similar OID for Device trust certificate ?
- Daniel_Wolf
I'm not really an SNMP / OID expert...
You can run the command also from remote. Instead of localhost you can use the management IP of the BIG-IP.
And then you could create some status in any Observbality Platform. And also an alert. That's all custom code. Ask Claude... the sky is the limit :)
