dotfiles/home/bin/cert_expiry

16 lines
417 B
Plaintext
Raw Normal View History

#!/bin/bash
# Prints the expiration dates of all TLS Certificates in a directory
# This is usually pem, but can also be crt
if [[ -z $1 ]]; then
echo "certificate type not set, defaulting to pem"
filetype="pem"
else
filetype=$1
fi
for filename in ./*.${filetype}; do
echo -n "${filename} expires on: "
openssl x509 -noout -dates -in "${filename}" | sed -n '/notAfter/p' | sed 's/^.\{9\}//'
done