svn/view/checkvalid.bash

#!/bin/bash

[[ ! -f $HOME/masspie/cacert.pem ]] && echo $HOME/masspie/cacert.pem is required && exit 1

[[ -z $1 ]] && echo missing x\*.ptr.validcn file as first argument && exit 1
inputfile=$1

ehlo=pro5s2.nethence.com
#ehlo=`curl -s ip.nethence.com | sed -n 1p | awk '{print $NF}' | sed 's/\.$//'`

echo using $ehlo as EHLO and writing to $inputfile.return
for mx in `cat $inputfile`; do
        echo -en "$mx\t"

        #we only need the last result with 'Verify', as it repeats in parenthesis what 'Verification' said above
        echo Q | timeout --preserve-status -k 5s 10s /usr/local/bin/openssl s_client -4 -showcerts -verify 5 -CAfile $HOME/masspie/cacert.pem -starttls smtp -name $ehlo -servername $mx -connect $mx:25 -crlf 2>/dev/null | grep Verify || echo
        #-CApath /etc/ssl/certs
        #-brief
        #-verify_return_error
done > $inputfile.return; unset mx
