romanrm/checkrevoke.sh Secret

## checkrevoke.sh
#!/bin/bash

# Automated revocation check for SSL certificates (*.pem)

CERTDIR=/YOUR_PEMFILES_DIR/
TMPFILE=/tmp/checkrevoke.tmp

if [ "$1" == "-v" ]; then
  VERBOSE=1
fi

cd $CERTDIR || ((echo Failed to cd to the cert directory!; exit 1))

for F in `find . -maxdepth 1 -type f | cut -d / -f 2 | grep -v -e chain\.pem -e \.sh$`; do
  if [ "$VERBOSE" == "1" ]; then echo Checking $F...; fi
  URL=`openssl x509 -noout -ocsp_uri -in $F`
  HOST=`echo $URL | cut -d / -f 3`
  CMD="openssl ocsp -issuer chain.pem -cert $F -text -url $URL -header HOST=$HOST"
  if [ "$VERBOSE" == "1" ]; then echo $CMD; fi
  RESP=`$CMD > $TMPFILE 2>&1`
  if [ "$VERBOSE" == "1" ]; then cat $TMPFILE; fi
  if [ "`grep \"$F: good\" $TMPFILE`" == "" ]; then
    echo $F seems to be revoked!
  fi
done

rm $TMPFILE
	#!/bin/bash

	# Automated revocation check for SSL certificates (*.pem)

	CERTDIR=/YOUR_PEMFILES_DIR/
	TMPFILE=/tmp/checkrevoke.tmp

	if [ "$1" == "-v" ]; then
	VERBOSE=1
	fi

	cd $CERTDIR \|\| ((echo Failed to cd to the cert directory!; exit 1))

	for F in `find . -maxdepth 1 -type f \| cut -d / -f 2 \| grep -v -e chain\.pem -e \.sh$`; do
	if [ "$VERBOSE" == "1" ]; then echo Checking $F...; fi
	URL=`openssl x509 -noout -ocsp_uri -in $F`
	HOST=`echo $URL \| cut -d / -f 3`
	CMD="openssl ocsp -issuer chain.pem -cert $F -text -url $URL -header HOST=$HOST"
	if [ "$VERBOSE" == "1" ]; then echo $CMD; fi
	RESP=`$CMD > $TMPFILE 2>&1`
	if [ "$VERBOSE" == "1" ]; then cat $TMPFILE; fi
	if [ "`grep \"$F: good\" $TMPFILE`" == "" ]; then
	echo $F seems to be revoked!
	fi
	done

	rm $TMPFILE