46 lines
953 B
Plaintext
46 lines
953 B
Plaintext
|
#!/bin/bash
|
||
|
|
|
||
|
|
if [ -z "$OPENVPN" ]; then
|
||
|
|
export OPENVPN="$PWD"
|
||
|
|
fi
|
||
|
|
if ! source "$OPENVPN/ovpn_env.sh"; then
|
||
|
|
echo "Could not source $OPENVPN/ovpn_env.sh."
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
if [ -z "$EASYRSA_PKI" ]; then
|
||
|
|
export EASYRSA_PKI="$OPENVPN/pki"
|
||
|
|
fi
|
||
|
|
|
||
|
|
cd "$EASYRSA_PKI"
|
||
|
|
|
||
|
|
if [ -e crl.pem ]; then
|
||
|
|
cat ca.crt crl.pem > cacheck.pem
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "name,begin,end,status"
|
||
|
|
for name in issued/*.crt; do
|
||
|
|
path=$name
|
||
|
|
begin=$(openssl x509 -noout -startdate -in $path | awk -F= '{ print $2 }')
|
||
|
|
end=$(openssl x509 -noout -enddate -in $path | awk -F= '{ print $2 }')
|
||
|
|
|
||
|
|
name=${name%.crt}
|
||
|
|
name=${name#issued/}
|
||
|
|
if [ "$name" != "$OVPN_CN" ]; then
|
||
|
|
if [ -e crl.pem ]; then
|
||
|
|
if openssl verify -crl_check -CAfile cacheck.pem $path &> /dev/null; then
|
||
|
|
status="VALID"
|
||
|
|
else
|
||
|
|
status="REVOKED"
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
status="VALID"
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "$name,$begin,$end,$status"
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|
||
|
|
if [ -e crl.pem ]; then
|
||
|
|
rm cacheck.pem
|
||
|
|
fi
|