Forum Discussion

MichellePhipps's avatar
MichellePhipps
Icon for Nimbostratus rankNimbostratus
Aug 17, 2020

tmsh comand to list only certs by issuer

I'm trying to get a list of all self signed certificate or by issuer installed on all partitions that will expire in 30 days   These are the other command that I use: tmsh list sys file ssl-cer...
BIG-IP
reporting
security
TMSH
  • Dario_Garrido's avatar
    Dario_Garrido
    Aug 31, 2020

    Hello Michelle.

    Expiration-date is a timestamp not a date.

    # date -d @1638964800 
Wed Dec  8 13:00:00 CET 2021

    You can use 'expiration-string' instead.

    # tmsh list sys file ssl-cert expiration-string

    Please, don't forget to mark the answer as the best to help other people to find it.

    Regards,

    Dario.

Dario_Garrido's avatar
Dario_Garrido
Icon for MVP rankMVP
Aug 17, 2020

Hello Michelle.

You can check all partitions with a command similar to this:

tmsh -q -c "cd / ; list sys file recursive ssl-cert issuer subject expiration-date"

If you need something else, you can tune this previous command or modify the output using some BASH engineering.

Regards,

Dario.