Forum Discussion

vijay_Kunigal_3's avatar
vijay_Kunigal_3
Icon for Nimbostratus rankNimbostratus
Jan 17, 2018

Rest API - Device certificate URL

I wanted to retrieve server certificate(path: System--> Device Certificates--> Device Certificate) expiry information via iControl REST API. can some one provide me API url ?

 

application delivery
devops
iControlREST
  • Satoshi_Toyosa1's avatar
    Satoshi_Toyosa1
    Ret. Employee
    Jan 24, 2018

    Looks like there is no direct iContrl REST API for Device Certificate (to my knowledge), however, as described in K6353: Updating an SSL device certificate on a BIG-IP system, we can manipulate it in the command line by using the 

    openssl
    utility. That means we can do the same via the 
    /mgmt/tm/util/bash
    endpoint as below.

        curl -sku admin: https:///mgmt/tm/util/bash \
       -H "Content-Type: application/json" -X POST \
       -d "{\"command\":\"run\", \"utilCmdArgs\": \"-c 'openssl x509 -text -in /config/httpd/conf/ssl.crt/server.crt'\"}" \
     | sed 's/\\n/\n/g' | grep "Not After"

    Example output:

    Not After : Sep 25 01:32:16 2027 GMT

    Not elegant, but it does the job. What do you think?