script to check ssl certs against startcom ocsp thingy.

startcom-sub1-oscp-check

#!/bin/sh
# 
# startcom / startssl ocsp check for class 1 certs
#


if [ ! -e sub.class1.server.ca.pem ] ; then
        wget https://www.startssl.com/certs/sub.class1.server.ca.pem
fi

if [ ! -e ca-bundle.pem ] ; then
        wget https://www.startssl.com/certs/ca-bundle.pem
fi

for c in *.cert ; do
        if [ ! -z ${c} ] ; then
                openssl ocsp -no_nonce -url http://ocsp.startssl.com/sub/class1/server/ca \
                -issuer sub.class1.server.ca.pem \
                -header "HOST" "ocsp.startssl.com" -CAfile ca-bundle.pem -VAfile ca-bundle.pem -cert ${c}
        fi
done