58 lines
1.3 KiB
Bash
Executable File
58 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Colors
|
|
GREEN='\033[0;32m'
|
|
RED='\033[0;31m'
|
|
NC='\033[0m' # No Color
|
|
|
|
print_status() {
|
|
local item="$1"
|
|
local status="$2"
|
|
if [ "$status" -eq 0 ]; then
|
|
echo -e "${item}: ${GREEN}OK${NC}"
|
|
else
|
|
echo -e "${item}: ${RED}FAIL${NC}"
|
|
EXIT_CODE=1
|
|
fi
|
|
}
|
|
|
|
EXIT_CODE=0
|
|
|
|
# Determine Project Directory
|
|
if [ -d "certs" ] && [ -f "Caddyfile" ]; then
|
|
PROJECT_DIR="$PWD"
|
|
else
|
|
PROJECT_DIR="/home/john/soteria"
|
|
fi
|
|
|
|
CERTS_DIR="$PROJECT_DIR/certs"
|
|
SERVER_CERT="$CERTS_DIR/soteria.crt"
|
|
SERVER_KEY="$CERTS_DIR/soteria.key"
|
|
TIMER_NAME="cert-renewer.timer"
|
|
|
|
# 1. Check Certificates Existence
|
|
if [ -f "$SERVER_CERT" ] && [ -f "$SERVER_KEY" ]; then
|
|
print_status "Certificate Files" 0
|
|
else
|
|
print_status "Certificate Files" 1
|
|
fi
|
|
|
|
# 2. Check Certificate Validity (Is it valid NOW?)
|
|
if [ -f "$SERVER_CERT" ] && command -v openssl &> /dev/null; then
|
|
# Check if valid for at least 60 seconds
|
|
if openssl x509 -checkend 60 -noout -in "$SERVER_CERT" &> /dev/null; then
|
|
print_status "Certificate Validity" 0
|
|
else
|
|
print_status "Certificate Validity" 1
|
|
fi
|
|
fi
|
|
|
|
# 3. Check Timer Status
|
|
if systemctl is-active "$TIMER_NAME" &> /dev/null; then
|
|
print_status "Renewal Timer" 0
|
|
else
|
|
print_status "Renewal Timer" 1
|
|
fi
|
|
|
|
exit $EXIT_CODE
|