SSL certificate expiration

[Aidar5]

Hello!

Has anybody ever configured snmp monitoring of upcoming SSL certificate expiration? We use SA4500 device.
It will be great if someone can advice with snmp OID or any other useful information.

Thank you.

[zanyterp]

I do not believe that is in our OID; however, it may be in the events log
Do you export your logs via syslog?

[Aidar5]

Yes, we have syslog. But do you think that upcoming cert expiration can be detected via logs?
Thank you.

[Aidar5]

Or may be some feature/command exists on SSL device that allows to check certificate validity?

[Filbert]

There is a RPC called get-certificate-info which provides certificate validity. Check the DMI guide for details. Also, the administrator GUI in version 8.2 provides alerts on upcoming certificate expirations.

[Aidar5]

Thank you Filbert.
DMI is not enabled on our devices. But we found another solution. Just gather information about ssl expiration from External IP of VS using linux "openssl" command.