OpenSSL X.509 Certificate Linking / Verify

certlink.sh

#!/bin/sh
#
# usage: certlink.sh filename [filename ...]
#
# This create links like:
# 2c543cd1.0 -> GeoTrustGlobalCA.crt
#
# Source: www.madboa.com/geek/openssl/
# License: creativecommons.org/licenses/by-nc-sa/3.0/
#
for CERTFILE in $*; do
  # make sure file exists and is a valid cert
  test -f "$CERTFILE" || continue
  HASH=$(openssl x509 -noout -hash -in "$CERTFILE")
  test -n "$HASH" || continue

  # use lowest available iterator for symlink
  for ITER in 0 1 2 3 4 5 6 7 8 9; do
    test -f "${HASH}.${ITER}" && continue
    ln -s "$CERTFILE" "${HASH}.${ITER}"
    test -L "${HASH}.${ITER}" && break
  done
done

verify.sh

#!/bin/sh
#
# usage: verify.sh filename [filename ...]
#
openssl verify -CApath /etc/ssl/certs/ $*