Any way to extract Certificate.NotAfter date from App Gateway Certificates in Azure Policy

Question

Any way to extract Certificate.NotAfter date from App Gateway Certificates in Azure Policy

Christophe Humbert 126

Hello

I would like to know if there is any way to extract end of validity date of

Microsoft.Network/applicationGateways/sslCertificates[*].publicCertData

in App Gateway in Azure Policy

Thanks

AnuragSingh-MSFT 21,491 Reputation points

2023-02-20T06:42:32.9533333+00:00

@Christophe Humbert , I wanted to check if you had a chance to review my reply above. Please let me know if you have any questions.
Christophe Humbert 126 Reputation points

2023-02-20T09:29:13.1533333+00:00

Hello @AnuragSingh-MSFT

Yes I know but normally with some code (in PowerShell) you are able to extract NotAfter from public Certificate Data which is available in the JSON View...so the encoded data are available but to my knowledge there is no way to compute it in Azure Policy...
AnuragSingh-MSFT 21,491 Reputation points

2023-02-21T04:35:50.6966667+00:00

@Christophe Humbert , yes you are right. That can be obtained using PowerShell/REST API etc., but the same can't be checked from an Azure Policy Definition.

1 answer

Your answer

AnuragSingh-MSFT 21,491 Reputation points

2023-02-20T06:42:32.9533333+00:00

@Christophe Humbert , I wanted to check if you had a chance to review my reply above. Please let me know if you have any questions.
Christophe Humbert 126 Reputation points

2023-02-20T09:29:13.1533333+00:00

Hello @AnuragSingh-MSFT

Yes I know but normally with some code (in PowerShell) you are able to extract NotAfter from public Certificate Data which is available in the JSON View...so the encoded data are available but to my knowledge there is no way to compute it in Azure Policy...
AnuragSingh-MSFT 21,491 Reputation points

2023-02-21T04:35:50.6966667+00:00

@Christophe Humbert , yes you are right. That can be obtained using PowerShell/REST API etc., but the same can't be checked from an Azure Policy Definition.

Answer 1

AnuragSingh-MSFT 21,491

@Christophe Humbert I see that you are trying to get the expiry date of certificate used in App Gateway. As seen in the exported template of Ap gateway (by using the "Export Template"), the certificate data itself does not become part of the resource definition. Hence, it cannot be extracted in Azure Policy.

Please let me know if you have any questions.

Share via

Any way to extract Certificate.NotAfter date from App Gateway Certificates in Azure Policy

1 answer

Your answer