CLI command for known certificates and keys information
Release: 4.5.6.1
For the Symantec SSL Visibility command to view all learned certificates/keys, please refer to the CLI command shown below.
admin> segment learned-cert-cache show all
See the snippet below, for further guidance.
The output will show the confidence level key and status of the certificate. The expiration date will not be shown
To access the "admin>" command mode, the CLI command below should be utilized.
sslv# cld
Note:
For the information such as sni-name, SHA value, expiration date, etc. for the imported certificates, we can confirm that there is no available CLI command, in the SSLV, to see that. Please note that this has been fully validated by the Advanced Engineering team as well. They are viewable in the session logs, with the exception of the expiry date. By inspecting the SSL certificate from the PCAP, the validity would be seen. See a sample snippet below, for checking the validity of an SSL certificate from WireShark.
For accessing the session log details, please refer to the guidance provided in the Tech. doc. with URL below.