Skip to content

Added check for certificate expiration issue#407

Open
asraf-khan wants to merge 3 commits into
datacenter:v4.2.0-devfrom
asraf-khan:issue6-SSL-expire
Open

Added check for certificate expiration issue#407
asraf-khan wants to merge 3 commits into
datacenter:v4.2.0-devfrom
asraf-khan:issue6-SSL-expire

Conversation

@asraf-khan

@asraf-khan asraf-khan commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Detection logic:

  1. Find the fault using below query
    'faultInst.json?query-target-filter=or(eq(faultInst.code,"F4501"),eq(faultInst.code,"F4502"),eq(faultInst.code,"F4503"),eq(faultInst.code,"F3081"),eq(faultInst.code,"F3082"),eq(faultInst.code,"F4617"),eq(faultInst.code,"F4752"),eq(faultInst.code,"F4753"))'

  2. if one fault F4501, F3081, F4617, F4752 found and state is “raised” or “soaking”
    Result = Manual & recommended_action ="Renew the certificate(s) before it expires to avoid service disruption."

  3. if one fault F4502, F4503, F3082, F4753 and state is “raised” or “soaking”
    Result = FAIL_O & recommended_action="Renew the certificate(s) immediately to restore functionality."

  4. if faults found as combination (e.g. expiring F3081 & expired F4502 ) means
    Result = FAIL_O & recommended_action="Renew expired certificate(s) immediately. For certificate(s) approaching expiry, renew before they expire to avoid service disruption."

Faults            Short Description                    Introduced         First build
F3081, F3082      SAML encryption cert expiring/expired     2018-02-22        3.1(2f)
F4501, F4502      KeyRing cert expiring/expired             2023-09-13        6.0(4c)
F4503, F4617      TP cert expired/expiring                  2024-04-22        6.1(1e)
F4752,F4753 Factory cert expiring/expired 6.1(5e)

For Factory certificate status if cversion < 6.1(5e), check via cli command "acidiag verifyapic"

@asraf-khan

Copy link
Copy Markdown
Contributor Author

Attached log for reference.

APIC Log :

APIC Run log - SSL Cert expiry issue.docx

Pytest Log:

Pytest log - SSL Cert expiry issue.docx

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant