Check all certs in ssl.conf

Citadel · 01-03-2013, 10:03 AM

Hi all,

Not sure why this isn't working but I want to be able to check the expiry on a number of domains.

Code:

#!/bin/bash
for line in `grep SSLCertificateFile /etc/httpd/conf.d/ssl.conf|grep -v \#|awk '{print $2}'`
do
openssl x509 -in $line -text -noout |grep "Not After"
#echo $line;
done

The echo shows the correct path to the file and if I run the openssl command with that file path it works fine. The error I am getting is:

Code:

Error opening Certificate /etc/httpd/conf/ssl.crt/www.mydomain.com.crt
','r')error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('/etc/httpd/conf/ssl.crt/www.mydomain.com.crt
10756:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
unable to load certificate

Citadel · 01-04-2013, 10:27 AM

My guess is that its grabbing the EOL character immediately after the path to the certificate. If I remove the character in the initial awk command it breaks because the EOL character of course says that the text is a line. If I try to remove the character afterwards it still complains.

Any thoughts?

Craig