svn/view/checkssl.bash

#!/bin/bash
set -e

debug=0

[[ ! -f $HOME/masspie/cacert.pem ]] && echo $HOME/masspie/cacert.pem is required && exit 1

ehlo=pro5s2.nethence.com
#ehlo=`curl -s ip.nethence.com | sed -n 1p | awk '{print $NF}' | sed 's/\.$//'`
echo using $ehlo as EHLO

function checkssl {
        [[ -z $mx ]] && echo function $0 requires \$mx && exit 1

        #we only need the last result with 'Verify', as it repeats in parenthesis what 'Verification' said above
        if raw=`echo Q | timeout --preserve-status -k 5s 10s /usr/local/bin/openssl s_client -4 -showcerts -verify 5 -CAfile $HOME/masspie/cacert.pem -starttls smtp -name $ehlo -servername $mx -connect $mx:25 -crlf 2>/dev/null`; then
                issuer=`echo "$raw" | grep -E '^issuer='`
                cipher=`echo "$raw" | grep -E 'Cipher is|^Server public key is'`

                [[ -n $issuer ]] && echo -e $mx\\t$issuer >> $piece.ssl.issuer
                [[ -n $cipher ]] && echo -e $mx\\t$cipher >> $piece.ssl.cipher

                unset issuer cipher
        fi
        result=`echo "$raw" | grep -E 'Cipher is|Verify return code'`
        echo -e $mx\\t$result

        #-CApath /etc/ssl/certs
        #-brief
        #-verify_return_error

        unset raw result
}

function processpiece {
        rm -f $piece.ssl.issuer $piece.ssl.cipher
        for mx in `cat $piece`; do
                checkssl
        done > $piece.ssl && echo $piece done || echo $piece FAIL; unset mx
}

#echo -n entering domains/mx/dane/ ...
#mkdir -p domains/mx/dane/
#cd domains/mx/dane/

#echo -n splitting mx.unique into 50 pieces...
#split -a2 -d -nl/50 ../mx.unique mx.unique && echo done

#real    392m40.484s
#user    195m10.038s
#sys     33m7.304s
echo -n starting 50 processes to process those...
#for piece in mx.unique48; do
echo writing to mx.uniqueXX.ssl mx.uniqueXX.ssl.issuer mx.uniqueXX.ssl.cipher
for piece in mx.unique[0-9][0-9]; do
        processpiece &
done && echo all pieces processing done || echo all pieces processing FAIL; unset piece
cat <<EOF

watch live with

        ps auxfww | grep checkssl | grep -v grep
        cd mass/splitted/domains/mx/dane/
        tail -F *.ssl

EOF
time wait
