Here is a little script I wrote to automate putting certificates onto ASAs. It also activates the cert on the inside interface (mine is a one-armed VPN concentrator). The cert is assumed to already in the correct format and named asabase64.cert.
#!/usr/bin/env python3
from netmiko import Netmiko
import base64
import datetime
# connection config for netmiko
asav = {
"host": "hostname",
"username": "user",
"password": "pass",
"device_type": "cisco_asa",
"secret": "enable secret"
}
# open and read the cert
with open("asabase64.cert", "r") as f:
cert = f.read().splitlines()
# name the cert with today's date
# this helps when pushing a new cert
# to not have a namespace overlap
today = datetime.datetime.now().strftime("%d-%m-%Y")
certname = today + "starcert"
certcmd = "crypto ca import " + certname + " pkcs12 asaexportpass"
# build the commands needed to install the cert
commands = []
commands.append("conf t")
commands.append(certcmd)
commands = commands + cert
commands.append("")
commands.append("quit")
trustpoint = "ssl trust-point " + certname + " inside"
commands.append(trustpoint)
# connect to the firewall
net_connect = Netmiko(**asav)
print(net_connect.find_prompt())
# always a good test
output = net_connect.send_command_timing("show int ip br")
# send the commands
for command in commands:
print(command)
net_connect.send_command_timing(command)
# clean up
net_connect.disconnect()