ocsp-tester.sh

#!/bin/bash

if [ "${EUID}" -ne 0 ]; then
    echo "Please run with sudo privs"
    exit 1
fi

if [ $# -ne 1 ]; then
    echo "Pass a website to the script"
    echo "Example"
    echo "  ./$(basename $0) www.example.com"
    exit 1
fi

URL=$1

BLD=$(tput bold)
RST=$(tput sgr0)

echo "${BLD}+) Searching for an OCSP endpoint in the cert located at:${RST} /etc/letsencrypt/live/${URL}/chain.pem"
OCSP_ENDPOINT=$(openssl x509 \
    -noout \
    -ocsp_uri \
    -in /etc/letsencrypt/live/${URL}/cert.pem)

if [ $? -eq 0 ]; then
    echo "${BLD}+) Found the OCSP endpoint:${RST} ${OCSP_ENDPOINT}"
else
    echo "${BLD}-) Did not find an OCSP endpoint${RST}"
    exit 1
fi

echo "${BLD}+) Generating:${RST} ${URL}.der"
openssl ocsp \
    -url ${OCSP_ENDPOINT} \
    -header "Host" "$(echo ${OCSP_ENDPOINT} | sed -e 's|^https://||' -e 's|^http://||')" \
    -issuer /etc/letsencrypt/live/${URL}/chain.pem \
    -cert /etc/letsencrypt/live/${URL}/cert.pem \
    -verify_other /etc/letsencrypt/live/${URL}/chain.pem \
    -no_nonce \
    -resp_text \
    -respout ${URL}-ocsp.der

echo "${BLD}+) ${URL}-ocsp.der has been created${RST}"
ls -al ${URL}-ocsp.der

chmod +x ocsp-tester.sh
sudo ./ocsp-tester.sh www.example.com