Is it possible to read TLS certificate expiry date within application

RE: Is it possible to read TLS certificate expiry date within application

kkksss — Sat, 12 Nov 2022 00:14:18 GMT

Hi,

Trying to verify by reading back the certificates and comparing with a CRC.

I'm able to read the CA_CHAIN, but cannot read the Public_Cert and the Private_Cert.

Is that for obvious security reasons that you wouldn't be able to read those certs?

In that case is there a way for getting a length or a checksum of those fields?

I have used the modem_key_mgmt_cmp and that works for all the above three certificates.

That is probably sufficient to confirm that the fields have been written successfully.

Thank you

Chetan Kale — Mon, 17 Oct 2022 12:19:23 GMT

Hi,

Thank you for the clarification.

Regards,

Chetan

Håkon Alseth — Mon, 17 Oct 2022 09:38:00 GMT

Hi,

Unfortunately, there's no API or way to read out the expiration of a certificate.

You must manually keep track of which certificates that you provide to the nRF and when they expire.

Kind regards,

Håkon