Forum Discussion

Alok_3817's avatar
Alok_3817
Icon for Nimbostratus rankNimbostratus
Feb 02, 2009

Icontrol to query the Certificates

Hi,

 

 

I use IControl with Perl, I was looking to see if there was a way in which we could get the details of all the certificates installed on the Big IP along with the expiry dates, Basically like an output when we click on "SSL Certificates" on the Big IP GUI.

 

 

I have a lot of certificates installed and would need to get the expiry date for those.

 

 

Any help on this is appreciated

 

 

Thanks again

 

 

Alok

5 Replies

  • I whipped up a perl sample that displays all the information about the certificates on the system (including the expiration time). The expiration time is in a user friendly string as well as the number of seconds since the epoch (Click here).

     

     

    By default it will query the certs used in SSL profiles but you can request a different management mode on the commandline. All the info should be in the usage function.

     

     

    http://devcentral.f5.com/wiki/default.aspx/iControl/PlCertificateInfo.html

     

    Click here

     

     

     

    Hope this helps!

     

     

    -Joe
  • Awesome Man, this is something which i wanted, i'll modify the code to produce the output as per the requirement.

     

     

    Thanks again man ...

     

     

  • Also, Joe, if I run this with 'use warnings' or perl -w I get a metric crapload of errors. Any idea how to elminate these?
  • Hi Guys,

     

     

    I am new to scripting however I need to know how I can use the Perl script to get the details of the certificate.

     

    Basically how can I run the script to extract the data ssl certificate and when they expire?

     

     

    Thanks,

     

    Nitin