in Linux_scripts/rhui-check/rhui-check.py [0:0]
def expiration_time(cert_path):
"""
Checks whether client certificate stored at cert_path has expired or not.
"""
logger.debug('Entering expiration_time()')
logger.debug('Checking certificate expiration time.')
try:
result = subprocess.check_call('openssl x509 -in {} -checkend 0 > /dev/null 2>&1 '.format(cert_path),shell=True)
except subprocess.CalledProcessError:
logger.critical('Client RHUI Certificate has expired, please update the RHUI rpm.')
logger.critical('Refer to: https://learn.microsoft.com/troubleshoot/azure/virtual-machines/troubleshoot-linux-rhui-certificate-issues#cause-1-rhui-client-certificate-is-expired')
exit(1)
if not default_policy():
logger.critical('Client crypto policies not set to DEFAULT.')
logger.critical('Refer to: https://learn.microsoft.com/troubleshoot/azure/virtual-machines/linux/troubleshoot-linux-rhui-certificate-issues?tabs=rhel7-eus%2Crhel7-noneus%2Crhel7-rhel-sap-apps%2Crhel8-rhel-sap-apps%2Crhel9-rhel-sap-apps#cause-5-verification-error-in-rhel-version-8-or-9-ca-certificate-key-too-weak')
exit(1)