Forum Discussion

Joe_Curl_105786's avatar
Joe_Curl_105786
Icon for Nimbostratus rankNimbostratus
Oct 31, 2013

SSL Certificate Report

We are trying to run a report using Powershell to identify the certificates we have when they expire and what VIP the SSL profile is tied to. We have gotten the parts of listing the certificates and...
devops
iControl
mhite_60883's avatar
mhite_60883
Icon for Cirrocumulus rankCirrocumulus
Oct 31, 2013

There aren't any API calls that do exactly what you want. You have to piece the data together yourself. For example, grab the list of all certificates. Then grab the list of all SSL profiles. Then grab the list of certificates associated with each profile. Then grab then the list of all virtual servers. Then grab what profiles are associated with virtual servers... etc. etc. Then you have to piece all that together into a report. ;)

 

  • mhite_60883's avatar
    mhite_60883
    Icon for Cirrocumulus rankCirrocumulus
    Nov 01, 2013
    Roughly speaking, the psuedo code is something like this: - Set recursive query state to enabled - Switch to / folder - Retrieve certificate list using Management.KeyCertificate.get_certificate_list() - Retrieve virtual server list using LocalLB.VirtualServer.get_list() - Retrieve virtual server profile list of virtual servers retrieved in previous step using LocalLB.VirtualServer.get_profile(() - Retrieve client SSL profiles using LocalLB.ProfileClientSSL.get_list() - Retrieve certificate associated with client SSL profiles using LocalLB.ProfileClientSSL.get_certificate_file_v2() With the above information, you now have enough information to form the proper data relationships and generate a report. There's a bit of data mangling you'll need to do on your own to create the required associations, but it's doable.