Forum Discussion
NimbostratusIControl and Cert Expiry
Hi,
I have a question,
I am little newbie to F5 iControl. Any help would be greatly appreciated.
In Summary:
What is am trying to is list the associated certificates with a particular F5 virtual server If I do this same things using the F5 console I would follow the following steps
1. Open the Virtual server
2. Check the client side or server side SSL profile
3. Then go to profiles or client or server and get the name of the cert
4. Then go to certificates and check the expiry date
I have tried the scripts.. Where I am with them is that I can list the pool members and SSL profile, is there any easier way to achieve this.
Thanks in advance
4 Replies
Michael_YatesHi Testing,
Here are the iControl Methods that you are going to want to dig into to get what you are wanting:
You can get more detailed information for these methods here: iControl API Reference
Get Virtual Server List:
LocalLBVirtualServer.get_list
Get Virtual Server SSL Profile (Client):
LocalLBVirtualServer.get_profile
LocalLBProfileType.PROFILE_TYPE_CLIENT_SSLGet Virtual Server SSL Profile (Server):
LocalLBVirtualServer.get_profile
LocalLBProfileType.PROFILE_TYPE_SERVER_SSLGet SSL Profile List (Client):
LocalLBProfileClientSSL.get_list
Get SSL Profile List (Server):
LocalLBProfileServerSSL.get_list
Get Certificate List: ManagementKeyCertificate.get_certificate_list
Get Key List: ManagementKeyCertificate.get_key_list
TESTING_32412Hi Michael Yates, thanks for a quick and prompt response (Get-F5.iControl).LocalLBProfileClientSSL.get_certificate_file_v2(""); This just gives me the text containing .crt How do i get an expiry date? what i am trying to achieve is i want to check all the Virtual server's that are active in LTM and navigate through its profile, and find out which cert is it using and then find out the expiry date of the cert. any advise is greatly appreciated. thanks, Kumar
Michael_Yates_6Cirrus
Hi Testing,
Here are the iControl Methods that you are going to want to dig into to get what you are wanting:
You can get more detailed information for these methods here: iControl API Reference
Get Virtual Server List:
LocalLBVirtualServer.get_list
Get Virtual Server SSL Profile (Client):
LocalLBVirtualServer.get_profile
LocalLBProfileType.PROFILE_TYPE_CLIENT_SSLGet Virtual Server SSL Profile (Server):
LocalLBVirtualServer.get_profile
LocalLBProfileType.PROFILE_TYPE_SERVER_SSLGet SSL Profile List (Client):
LocalLBProfileClientSSL.get_list
Get SSL Profile List (Server):
LocalLBProfileServerSSL.get_list
Get Certificate List: ManagementKeyCertificate.get_certificate_list
Get Key List: ManagementKeyCertificate.get_key_list
- TESTING_32412Hi Michael Yates, thanks for a quick and prompt response (Get-F5.iControl).LocalLBProfileClientSSL.get_certificate_file_v2(""); This just gives me the text containing .crt How do i get an expiry date? what i am trying to achieve is i want to check all the Virtual server's that are active in LTM and navigate through its profile, and find out which cert is it using and then find out the expiry date of the cert. any advise is greatly appreciated. thanks, Kumar
