For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cwdusheke_14267's avatar
cwdusheke_14267
Icon for Nimbostratus rankNimbostratus
Aug 07, 2015

tmsh or web - report of sha1 certs

Does anybody know of a way to identify ssl certs based on type. I want to identify all of my certs which are still sha1. I tried googling and searching f5 dev. I didn't find anything. I found a tmsh command which will list my ssl certs.

 

tmsh list ltm profile client-ssl test-ssl

 

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Aug 07, 2015

    The TMSH commands won't give you all of the additional details I think you're looking for. And by the way you'd use something like this:

    tmsh list sys crypto cert all

    A much more detailed option might be to use OpenSSL. Something like this:

    for f in `ls -b /config/filestore/files_d/Common_d/certificate_d/`; do openssl x509 -noout -text -in /config/filestore/files_d/Common_d/certificate_d/$f; done

    This will dump the x509 details of each certificate in the Common partition. You can optionally manipulate this to grep/awk for specific information instead of everything.