JezK
Edit File: ssl_crt_status
#!/usr/local/cpanel/3rdparty/bin/perl # cpanel - scripts/ssl_crt_status Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited package scripts::ssl_crt_status; use strict; use warnings; use Cpanel::SSLPath (); use Cpanel::SSLInfo (); use Getopt::Param (); use Cpanel::StringFunc (); use Cpanel::ArrayFunc (); use Term::ANSIColor (); use Cpanel::Config::LoadUserDomains (); use Cpanel::Hostname (); __PACKAGE__->run() unless caller(); sub run { my $param = Getopt::Param->new( { 'quiet' => 0, 'help_coderef' => sub { print <<"END_HELP"; $0 - give a status report of the server's SSL certificates --help this screen --verbose show more than just errors --verbose=long include verification result of valid crts By default it will check every domain, you can specify one or more specific domains to check by passing one or more --domain flags: --domain=your.domain.here --domain=other.domain.here END_HELP exit; }, } ); my $debug = $param->get_param('debug'); my $verbose = $param->get_param('verbose'); my @domains = Cpanel::ArrayFunc::uniq_from_arrayrefs( [ $param->exists_param('domain') ? $param->get_param('domain') : ( Cpanel::Hostname::gethostname(), grep( !/^\*/, sort keys %{ Cpanel::Config::LoadUserDomains::loaduserdomains( undef, 1 ) } ) ) ] ); if ( grep /^--domain$/, @domains ) { print "Domain must be unambiguously specified in this format --domain=fqdn.tld\n\n"; $param->help(); } my $sslroot = Cpanel::SSLPath::getsslroot(); print "[info] SSL root: $sslroot\n" if $verbose; if ($debug) { require Data::Dumper; } # fetchinfo() is and verifysslcert() may still be "loud" close STDERR; # just to be on the safe side open STDERR, '>', '/dev/null'; ## no critic qw(InputOutput::RequireCheckedOpen) for my $domain (@domains) { my $ssl_info_hr = Cpanel::SSLInfo::fetchinfo($domain); if ($debug) { print Data::Dumper::Dumper($ssl_info_hr); } if ( $ssl_info_hr->{'statusmsg'} =~ /^No certificate for the domain \S+ could be found[.]$/ ) { if ($verbose) { print Term::ANSIColor::color 'bold blue'; print "Ok: $domain does not have an SSL crt\n"; print Term::ANSIColor::color 'reset'; } } else { my ( $rc, $msg ) = Cpanel::SSLInfo::verifysslcert( $sslroot, $ssl_info_hr->{'crt'}, $ssl_info_hr->{'key'}, $ssl_info_hr->{'cab'}, 1, # makes verifysslcert() not do any print()s 1, # makes verifysslcert() return plain text instead of HTML ); if ($rc) { if ($verbose) { print Term::ANSIColor::color 'bold green'; print "Ok: $domain SSL crt verified\n"; print Term::ANSIColor::color 'reset'; if ( $verbose eq 'long' ) { print Cpanel::StringFunc::indent_string($msg) . "\n"; } } } else { print Term::ANSIColor::color 'bold red'; print "Error: $domain SSL crt verification failed:\n"; print Term::ANSIColor::color 'reset'; print Cpanel::StringFunc::indent_string($msg) . "\n"; } } } return 1; } 1;