How to get the x509 certificate expiry date from ACI CLI?

[rajangahlout]

Hi Team,

I want to get the expiry date of admin user x509 certificate from ACI CLI.
From GUI I am able to find the same.
Also please let me know how we can autorotate it before the expiry of same.

Thanks

[Katherine561Neufeld]

To get the expiry date of admin user x509 certificate from ACI CLI, you can use the following command:

openssl x509 -enddate -noout -in /securedata/ssl/CatNeedsBest/server.crt/

This command will show you the notAfter date, which is the expiration date of the certificate.

To autorotate the x509 certificate before it expires, you can use the act_util key_pair rotate command, which will generate a new key pair and certificate, and update the APIC configuration accordingly. You can also specify the number of days before expiration to trigger the rotation, for example:

act_util key_pair rotate 30

This command will rotate the key pair and certificate 30 days before the expiration date.

I hope this helps you manage your x509 certificates with ACI CLI. If you need more assistance, please let me know.