Check Certificate, Using OpenSSL

From RZWiki

To check a SSL certificate using OpenSSL use the openssl x509 command as shown below, a valid certificate will not produce any output, an invalid certificate will;

openssl x509 -in networkstuff.crt -text -noout

The optional -noout parameter prevents the actual certificate from being displayed.

The optional -text parameter displays information about the certificate including the encryption key.

Default Certificate Locations

F5 BigIP v4.x, v9.x

For v9.x, all LTM related SSL files are stored in subdirectories of: /config/ssl/ as follows;

• ssl.crl - Unknown
• ssl.crt - Certificates
• ssl.csr - Certificate Signing Requests
• ssl.key - Keys

For v4.x, the directory is: /config/bigconfig/

The device's own SSL key is located here: /config/httpd/conf/ssl.key/server.key

The device's own SSL certificate is located here: /config/httpd/conf/ssl.crt/server.crt

Related Articles

See the Check Certificate Expiry Date, Using OpenSSL article for information how to simply display the start and end date of a certificate

Information on OpenSSL Commands

We really do appreciate all feedback so please do send your comments, suggestions or corrections to sjiveson#routerzone.eu (replacing the # with an @)