Skip to content

Commit e673cac

Browse files
alagouttealagoutte
committed
README(.md): Add Chapiter about Certificate
1 parent 93e09a4 commit e673cac

File tree

1 file changed

+145
-0
lines changed

1 file changed

+145
-0
lines changed

‎README.md

+145
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,7 @@ With this module (version 0.7.0) you can manage:
3535
- [API Client](#api-client) (Add / Get / Remove)
3636
- [Application License](#application-license) (Add / Get / Remove)
3737
- [Authentication Method and Source](#Authentication-Method-and-Source) (Get Auth Source and Method)
38+
- [Certificate](#Certificate) (Get Cluster, Service, Server and Trust List Certificate)
3839
- [CPPM](#clearpass-version) (Get Version)
3940
- [Device Fingerprint](#device-fingerprint) (Add /Get)
4041
- [Endpoint](#endpoint) (Add / Get / Set / Remove and Add / Set / Remove [Attribute](#attribute))
@@ -320,6 +321,150 @@ You can retrieve its Authentication information of Method (EAP, PAP...) `Get-Aru
320321
8 [Insight Repository] Insight database with session information for users and devices Local True
321322
```
322323

324+
### Certificate
325+
326+
You can retrieve its Cluster Certificate information of Method (HTTPS, RadSec, Database...) `Get-ArubaCPClusterCertificate`,
327+
Server (HTTPS, RadSec, Database...) `Get-ArubaCPServerCertificate` or Service `Get-ArubaCPServiceCertificate`
328+
329+
```powershell
330+
# Get Cluster Certificate
331+
Get-ArubaCPClusterCertificate
332+
333+
service_id : 1
334+
service_name : RADIUS
335+
certificate_type : RADIUS Server Certificate
336+
subject : CN=secure.arubademo.net
337+
expiry_date : Mar 15, 2024 20:21:15 PDT
338+
issue_date : Feb 12, 2023 19:21:15 PST
339+
issued_by : CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
340+
validity : Valid
341+
root_ca_cert :
342+
intermediate_ca_cert : {@{subject=CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US;
343+
expiry_date=May 03, 2031 00:00:00 PDT; issue_date=May 03, 2011 00:00:00 PDT; issued_by=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.",
344+
L=Scottsdale, ST=Arizona, C=US; validity=Valid; public_key_algorithm=RSA}, @{subject=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale,
345+
ST=Arizona, C=US; expiry_date=May 30, 2031 00:00:00 PDT; issue_date=Dec 31, 2013 23:00:00 PST; issued_by=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy
346+
Group, Inc.", C=US; validity=Valid; public_key_algorithm=RSA}}
347+
cert_file : -----BEGIN CERTIFICATE-----
348+
[...]
349+
-----END CERTIFICATE-----
350+
enabled : True
351+
public_key_algorithm : RSA
352+
353+
service_id : 2
354+
service_name : HTTPS(ECC)
355+
certificate_type : HTTPS(ECC) Server Certificate
356+
subject : CN=clearpass-sjc1.arubademo.net
357+
expiry_date : Jun 07, 2025 15:36:29 PDT
358+
issue_date : Jun 08, 2023 15:36:29 PDT
359+
issued_by : CN=clearpass-sjc1.arubademo.net
360+
validity : Valid
361+
root_ca_cert :
362+
intermediate_ca_cert : {}
363+
cert_file : -----BEGIN CERTIFICATE-----
364+
[...]
365+
-----END CERTIFICATE-----
366+
enabled : False
367+
public_key_algorithm : EC
368+
369+
service_id : 7
370+
service_name : HTTPS(RSA)
371+
certificate_type : HTTPS(RSA) Server Certificate
372+
subject : CN=*.arubademo.net
373+
expiry_date : Jul 20, 2024 13:32:07 PDT
374+
issue_date : Jul 24, 2023 12:43:51 PDT
375+
issued_by : CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
376+
validity : Valid
377+
root_ca_cert : @{subject=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US; expiry_date=Jun 29, 2034 10:06:20 PDT; issue_date=Jun 29, 2004 10:06:20
378+
PDT; issued_by=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US; validity=Valid; public_key_algorithm=RSA}
379+
intermediate_ca_cert : {@{subject=CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US;
380+
expiry_date=May 03, 2031 00:00:00 PDT; issue_date=May 03, 2011 00:00:00 PDT; issued_by=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.",
381+
L=Scottsdale, ST=Arizona, C=US; validity=Valid; public_key_algorithm=RSA}, @{subject=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale,
382+
ST=Arizona, C=US; expiry_date=May 30, 2031 00:00:00 PDT; issue_date=Dec 31, 2013 23:00:00 PST; issued_by=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy
383+
Group, Inc.", C=US; validity=Valid; public_key_algorithm=RSA}}
384+
cert_file : -----BEGIN CERTIFICATE-----
385+
[...]
386+
-----END CERTIFICATE-----
387+
enabled : True
388+
public_key_algorithm : RSA
389+
390+
service_id : 21
391+
service_name : RadSec
392+
certificate_type : RadSec Server Certificate
393+
subject : CN=clearpass-sjc1.arubademo.net
394+
expiry_date : May 11, 2025 14:33:46 PDT
395+
issue_date : Nov 20, 2019 13:33:46 PST
396+
issued_by : CN=clearpass-sjc1.arubademo.net
397+
validity : Valid
398+
root_ca_cert :
399+
intermediate_ca_cert : {}
400+
cert_file : -----BEGIN CERTIFICATE-----
401+
[...]
402+
-----END CERTIFICATE-----
403+
enabled : True
404+
public_key_algorithm : RSA
405+
406+
service_id : 106
407+
certificate_type : Database Server Certificate
408+
subject : O=PolicyManager, CN=clearpass-sjc1.arubademo.net
409+
expiry_date : Mar 18, 2027 16:36:57 PDT
410+
issue_date : Mar 18, 2022 16:36:57 PDT
411+
issued_by : O=PolicyManager, CN=clearpass-sjc1.arubademo.net
412+
validity : Valid
413+
root_ca_cert :
414+
intermediate_ca_cert : {}
415+
cert_file : -----BEGIN CERTIFICATE-----
416+
[...]
417+
-----END CERTIFICATE-----
418+
enabled : True
419+
public_key_algorithm : RSA
420+
421+
# Get Server Certificate RadSec from Server clearpass-sjc1.arubademo.net
422+
$server_uuid = (Get-ArubaCPServerConfiguration -name clearpass-sjc1.arubademo.net).server_uuid
423+
Get-ArubaCPServerCertificate -server_uuid $server_uuid -service_name "RadSec"
424+
425+
service_id : 21
426+
service_name : RadSec
427+
certificate_type : RadSec Server Certificate
428+
subject : CN=clearpass-sjc1.arubademo.net
429+
expiry_date : May 11, 2025 14:33:46 PDT
430+
issue_date : Nov 20, 2019 13:33:46 PST
431+
issued_by : CN=clearpass-sjc1.arubademo.net
432+
validity : Valid
433+
root_ca_cert :
434+
intermediate_ca_cert : {}
435+
cert_file : -----BEGIN CERTIFICATE-----
436+
[...]
437+
-----END CERTIFICATE-----
438+
enabled : True
439+
public_key_algorithm : RSA
440+
_links : @{self=}
441+
442+
# Get Service Certificate
443+
Get-ArubaCPServiceCertificate
444+
445+
id : 3147
446+
subject : CN=*.arubademo.net
447+
expiry_date : Jul 20, 2024 13:32:07 PDT
448+
issue_date : Jul 24, 2023 12:43:51 PDT
449+
issued_by : CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
450+
validity : Valid
451+
root_ca_cert : @{subject=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US; expiry_date=Jun 29, 2034 10:06:20 PDT; issue_date=Jun 29, 2004 10:06:20
452+
PDT; issued_by=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US; validity=Valid}
453+
intermediate_ca_cert : {@{subject=CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US;
454+
expiry_date=May 03, 2031 00:00:00 PDT; issue_date=May 03, 2011 00:00:00 PDT; issued_by=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.",
455+
L=Scottsdale, ST=Arizona, C=US; validity=Valid}, @{subject=CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US;
456+
expiry_date=May 30, 2031 00:00:00 PDT; issue_date=Dec 31, 2013 23:00:00 PST; issued_by=OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.",
457+
C=US; validity=Valid}}
458+
cert_file : -----BEGIN CERTIFICATE-----
459+
[...]
460+
-----END CERTIFICATE-----
461+
_links : @{self=}
462+
463+
...
464+
465+
```
466+
467+
323468
### ClearPass Version
324469

325470
You can retrieve its informations `Get-ArubaCPCPPMVersion`.

0 commit comments

Comments
 (0)