Hi all,

Do you have any scripts to notify the SSL certificate expiry date on Linux or AIX machines. It very difficult to check the cert keystore daily for expiration date.

If anyone has please share with me. Thanks in advance :-)

Cheers
Sarav

Hi Sarav,

  From version 6 and later you have a monitor to manage certificate expiration:
 
  Manage certificate expiration settings
  pic.dhe.ibm.com/infocenter/wasinfo/v6r1/...
 
  From adminconsole go to:
 
  Security->SSL certificate and key management->Manage certificate expiration
 
  You can schedule the monitor and send messages to SystemOut (default) or to email address.
 
  Hope this helps.
 
regards

Hi Gabriel,

Thanks for the quick response. My company is a financial sector and due to compliance not allowing to do the change in adminconsole and re-directing to systemout.log.

If you have any unix script which uses keytool to list out the expiration date and move the expiry date with alias name to txt file.

Cheers
Sarav

Sarav,

  What you are configuring is a monitor, you can choose to send only email and not to SystemOut, still isn't valid option?

regards

Sarav,

  Some examples, sure that there are another ways to do, I'm not scriptmaster

  take in mind that you are putting a password in the script!!!!

  Then you need to review generated file (cell_keyp12.txt) to check "until"

  Windows:
keytool -list -v -keystore C:\WebSphere\AppServer7\profiles\Dmgr01\config\cells\Cell01\key.p12 -storetype pkcs12 -storepass WebAS| findstr /N "Owner: Valid" > cell_keyp12.txt

Unix
./keytool -list -v -keystore /opt/IBM/WebSphere/wp_profile/config/cells/portal7/nodes/portal7/key.p12 -storetype pkcs12 -storepass WebAS|grep -e "Owner:" -e "Valid" > cell_keyp12.txt

  Hope this helps.

regards,