Forum Discussion

gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
Sep 20, 2016

Looking to pull report for all SSL Certificates with expiration dates.

All,   I'm trying to see if there is a fast way to pull a report of all SSL certificates and their expiration dates on my Big IP device.   I used the tmsh command cd /; run /sys crypto check-ce...
BIG-IP
certificate expired
devops
ssl cert
TMSH
Jason_Nance's avatar
Jason_Nance
Icon for Nimbostratus rankNimbostratus
May 24, 2018

Python example:

!/usr/bin/env python3

import pytz

from dateutil.parser import parse
from f5.bigip import ManagementRoot

mgmt = ManagementRoot('hostname', 'username', 'password')
tz = pytz.timezone('America/Chicago')

for cert in mgmt.tm.sys.file.ssl_certs.get_collection():
    expiration = parse(cert.expirationString)

    print("Certificate '{}' expires {}".format(
        cert.fullPath,
        expiration.astimezone(tz),
    ))