For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MichellePhipps's avatar
MichellePhipps
Icon for Nimbostratus rankNimbostratus
Aug 17, 2020
Solved

tmsh comand to list only certs by issuer

I'm trying to get a list of all self signed certificate or by issuer installed on all partitions that will expire in 30 days   These are the other command that I use: tmsh list sys file ssl-cer...
BIG-IP
reporting
security
TMSH
  • Dario_Garrido's avatar
    Dario_Garrido
    Aug 31, 2020

    Hello Michelle.

    Expiration-date is a timestamp not a date.

    # date -d @1638964800 
Wed Dec  8 13:00:00 CET 2021

    You can use 'expiration-string' instead.

    # tmsh list sys file ssl-cert expiration-string

    Please, don't forget to mark the answer as the best to help other people to find it.

    Regards,

    Dario.

MichellePhipps's avatar
MichellePhipps
Icon for Nimbostratus rankNimbostratus
Aug 28, 2020

So when looking into the file the expiry date comes up as expiration-date 1638964800 instead of the actual date Dec 8 2021 12:00:00 GMT

Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Aug 31, 2020

Hello Michelle.

Expiration-date is a timestamp not a date.

# date -d @1638964800 
Wed Dec  8 13:00:00 CET 2021

You can use 'expiration-string' instead.

# tmsh list sys file ssl-cert expiration-string

Please, don't forget to mark the answer as the best to help other people to find it.

Regards,

Dario.