111 lines
3.6 KiB
Bash
111 lines
3.6 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Function to test DNS resolution for a subdomain
|
|
test_subdomain() {
|
|
local subdomain="$1"
|
|
local fqdn="${subdomain}.john-stream.com"
|
|
|
|
echo "========================================"
|
|
echo "Testing DNS for: $fqdn"
|
|
echo "========================================"
|
|
echo ""
|
|
|
|
# Test panoptes
|
|
echo "📍 Testing: panoptes"
|
|
result=$(dig @panoptes "$fqdn" +short +time=2 +tries=1 2>&1)
|
|
if [ -n "$result" ]; then
|
|
echo " ✅ Resolved to: $result"
|
|
dig @panoptes "$fqdn" +noall +answer +time=2 +tries=1 | sed 's/^/ /'
|
|
else
|
|
echo " ❌ Failed to resolve"
|
|
fi
|
|
echo ""
|
|
|
|
# Test CoreDNS (192.168.1.107)
|
|
echo "📍 Testing: 192.168.1.107 (CoreDNS)"
|
|
result=$(dig @192.168.1.107 "$fqdn" +short +time=2 +tries=1 2>&1)
|
|
if [ -n "$result" ]; then
|
|
echo " ✅ Resolved to: $result"
|
|
dig @192.168.1.107 "$fqdn" +noall +answer +time=2 +tries=1 | sed 's/^/ /'
|
|
else
|
|
echo " ❌ Failed to resolve"
|
|
fi
|
|
echo ""
|
|
|
|
# Test Cloudflare DNS (1.1.1.1)
|
|
echo "📍 Testing: 1.1.1.1 (Cloudflare DNS)"
|
|
result=$(dig @1.1.1.1 "$fqdn" +short +time=2 +tries=1 2>&1)
|
|
if [ -n "$result" ]; then
|
|
echo " ✅ Resolved to: $result"
|
|
dig @1.1.1.1 "$fqdn" +noall +answer +time=2 +tries=1 | sed 's/^/ /'
|
|
else
|
|
echo " ❌ Failed to resolve"
|
|
fi
|
|
echo ""
|
|
}
|
|
|
|
# Function to check SSL certificate for the domain
|
|
check_ssl_cert() {
|
|
local subdomain="$1"
|
|
local fqdn="${subdomain}.john-stream.com"
|
|
|
|
echo "========================================"
|
|
echo "SSL Certificate Check for: $fqdn"
|
|
echo "========================================"
|
|
echo ""
|
|
|
|
# Check if openssl is available
|
|
if ! command -v openssl &> /dev/null; then
|
|
echo "❌ openssl command not found. Please install openssl to check SSL certificates."
|
|
return 1
|
|
fi
|
|
|
|
# Try to fetch SSL certificate information
|
|
echo "📍 Fetching SSL certificate information..."
|
|
cert_info=$(echo | openssl s_client -servername "$fqdn" -connect "$fqdn:443" 2>/dev/null | openssl x509 -noout -text 2>/dev/null)
|
|
|
|
if [ -z "$cert_info" ]; then
|
|
echo " ❌ Failed to retrieve SSL certificate. The domain may not be accessible via HTTPS."
|
|
return 1
|
|
fi
|
|
|
|
# Extract and display key certificate information
|
|
echo " ✅ SSL certificate found!"
|
|
echo ""
|
|
|
|
# Get certificate details
|
|
cert_details=$(echo | openssl s_client -servername "$fqdn" -connect "$fqdn:443" 2>/dev/null | openssl x509 -noout -subject -issuer -dates 2>/dev/null)
|
|
|
|
echo "📋 Certificate Details:"
|
|
echo "$cert_details" | sed 's/^/ /'
|
|
echo ""
|
|
|
|
# Check certificate expiration
|
|
expiry_date=$(echo | openssl s_client -servername "$fqdn" -connect "$fqdn:443" 2>/dev/null | openssl x509 -noout -enddate 2>/dev/null | cut -d= -f2)
|
|
|
|
if [ -n "$expiry_date" ]; then
|
|
expiry_epoch=$(date -d "$expiry_date" +%s 2>/dev/null)
|
|
current_epoch=$(date +%s)
|
|
days_until_expiry=$(( ($expiry_epoch - $current_epoch) / 86400 ))
|
|
|
|
if [ $days_until_expiry -lt 0 ]; then
|
|
echo "⚠️ Certificate Status: EXPIRED ($days_until_expiry days ago)"
|
|
elif [ $days_until_expiry -lt 30 ]; then
|
|
echo "⚠️ Certificate Status: Expiring soon ($days_until_expiry days remaining)"
|
|
else
|
|
echo "✅ Certificate Status: Valid ($days_until_expiry days remaining)"
|
|
fi
|
|
fi
|
|
echo ""
|
|
}
|
|
|
|
# Test the subdomain
|
|
if [ -z "$1" ]; then
|
|
echo "Usage: $0 <subdomain>"
|
|
echo "Example: $0 appdaemon"
|
|
exit 1
|
|
fi
|
|
|
|
test_subdomain "$1"
|
|
check_ssl_cert "$1"
|