check status of the ssl certificate on f5 using rest api

[yunan_haris]

greetings all,

is there any way to check the ssl certificate status, validation, expiration date using rest api on the bigip?

thank you

[Samir]

As such there is no direct RestAPI commnd but you can customise based on your requiremnt.  Like tmsh there is comamnd to retrive the cert name n cert validity. 

tmsh list sys crypto cert

RestAPI you can try something like below. 

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'

 Hope it will help you

[yunan_haris]

hi @Samir

thank you for your reply, actually my customer has ask me about the rest api to detect the certificate expiration using ansible, because of that i need command to check regarding this. 

[Samir · Accepted solution]

forget to add your cert expiry output will be like

curl -sku admin:admin https://bigip_hostname/mgmt/tm/sys/crypto/cert/ | jq '.items[] | {certname: .name, CertExpiry: .apiRawValues.expiration}'
{
"certname": "/Common/abc_host_certJuly2022",
"CertExpiry": "Jul 14 17:11:26 2021 GMT"
}

[yunan_haris]

hi @Samir 

thank you, it works