SSL Certificate

keytool -list -v -keystore /usr/java/jdk1.8.0_301-amd64/jre/lib/security/cacerts -storepass <PWD> | grep “until:”

Do you need to know when your CA or Server certificates have expired or will expire? You have two choices to use:

1) DCM Print System Store (PRTSTORE) : https://lnkd.in/dTf7EgU9

2) Via STRSQL directly :

*SYSTEM Store Certificates expired or set to expire in 0 days
——————————————————————————–
SELECT * FROM TABLE(QSYS2.CERTIFICATE_INFO(CERTIFICATE_STORE_PASSWORD=> ‘xxxxxxxxxxxxxxxx’)) WHERE VALIDITY_END < CURRENT DATE + 0 DAYS

*SYSTEM Store Certificates EXPIRING in 30 days
——————————————————————————–
SELECT * FROM TABLE(QSYS2.CERTIFICATE_INFO(CERTIFICATE_STORE_PASSWORD=> ‘xxxxxxxxxxxxxxxx’)) WHERE VALIDITY_END BETWEEN CURRENT DATE AND CURRENT DATE + 30 DAYS
——————————————————————————–

SELECT * FROM TABLE(QSYS2.CERTIFICATE_INFO(CERTIFICATE_STORE_PASSWORD => <PASSWORDnotListed>))

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top