Options

CLI command to display cert info

paulhpaulh Member ✭
in System
I need to keep track of several devices and their cert expiration dates.
Is there a cli command to show me all the device certs with their expiration dates?
Tagged:

Comments

  • Options
    dshindshin Member ✭
    edited September 2015
    In 2.7.X, we have a CLI feature to show the SSL Cert expiry: The command is “show slb ssl cert”

    Example:
    AX2500#show slb ssl cert
    Name: server-ca Type: certificate/key Expiration: Jun 13 00:10:39 2014 GMT [Expired, Unbound]
    Name: server Type: certificate/key Expiration: Jun 13 00:11:44 2014 GMT [Expired, Unbound]
    Name: all-cert Type: certificate/key Expiration: May 24 23:59:59 2015 GMT [Expired, Unbound]

    In 4.1.X we do not have the feature available but you can use the GUI the expiration dates.

    You can also use SSL Expiry Check feature which notify admins for SSL cert expiry. This feature can be deployed for either 2.7.x or 4.0.1 builds. The CLI command will be similar and you will need to enable the SMTP server on the ACOS for the email notifications to work.

    Example:
    inside(config)#slb ssl-expire-check email test@example.com

    The feature “slb ssl-expire-check” is disabled by default.

    Otherwise GUI is always available for all certificate expiration details.

    Genard
Sign In or Register to comment.