python bigsuds - Profile Certificate Info

Problem this snippet solves:

This python bigsuds script prints profile certificate information from multiple devices specified as arguments. The script accepts multiple hostnames or IP addresses and can be passed from stdin.

How to use this snippet:

Single host <username> <hostname>

Multiple hosts <username> <hostname1> <hostname2>

Pass from File (Linux)

cat bigip-hosts | xargs <username>

Code :

#!/usr/bin/env python

__author__ = 'buzzsurfr'
__version__ = '0.1'

def get_profile_certificate(api):
Gets profile certificate information from multiple F5 BIG-IP devices.

dict get_profile_certificate(
BIGIP.bigip api,

api of type BIGIP.bigip contains the established connection.

Return Type
dict containing the certificate properties.

return api.Management.KeyCertificate.get_certificate_list_v2('MANAGEMENT_MODE_DEFAULT')

#  Standard Library
import sys
import re

#  Related Third-Party
import getpass

#  Local Application/Library Specific
import bigsuds

if len(sys.argv) < 3:
print "\n\n\tUsage: %s user host ..." % sys.argv[0]

#  Get login password from CLI
userpass = getpass.getpass()

#  Store results in variables for all hosts as dict
result = []

#  Iterate over hosts
for host in sys.argv[2:]:

#  Connect to BIG-IP
api = bigsuds.BIGIP(host, sys.argv[1], userpass)
api = api.with_session_id()

certs = get_profile_certificate(api)
for cert in certs:
cert['certificate']['host'] = host

#  Get console output column widths
space = 2
columns = {}
columns['host'] = max([len(cert['host']) for cert in result])
columns['id'] = max([len(cert['cert_info']['id']) for cert in result])
columns['subject'] = max([len(cert['subject']['common_name']) for cert in result if cert['subject']['common_name'] is not None])
columns['issuer'] = max([len(cert['issuer']['common_name']) for cert in result if cert['issuer']['common_name'] is not None])
columns['bit_length'] = 4
columns['expiration_string'] = max([len(cert['expiration_string']) for cert in result])
print_string = "%-"+str(columns['host'])+"s"+(' '*space)+\
               "%-"+str(columns['id'])+"s"+(' '*space)+\
               "%-"+str(columns['subject'])+"s"+(' '*space)+\
   "%-"+str(columns['issuer'])+"s"+(' '*space)+\
   "%"+str(columns['bit_length'])+"s"+(' '*space)+\

#  Output to console
print print_string % ("Host", "ID", "Subject", "Issuer", "Bits", "Expiration Date")
print print_string % ('='*columns['host'], '='*columns['id'], '='*columns['subject'], '='*columns['issuer'], '====', '='*columns['expiration_string'])
for certificate in result:
print print_string % (certificate['host'], certificate['cert_info']['id'], certificate['subject']['common_name'], certificate['issuer']['common_name'], str(certificate['bit_length']), certificate['expiration_string'])

Tested this on version:

Updated Jun 06, 2023
Version 2.0

Was this article helpful?

No CommentsBe the first to comment