initial commit of file from CVS for smeserver-zabbix-agent on Sat Sep 7 21:17:46 AEST 2024

root/var/lib/zabbix/bin/disco_certs_sudo

@@ -0,0 +1,49 @@
+#!/usr/bin/perl -w
+
+use strict;
+use warnings;
+use Crypt::OpenSSL::X509;
+use Date::Parse;
+use Getopt::Long;
+use JSON;
+
+my $index = '/opt/phpki/phpki-store/CA/index.txt';
+my $path = '/opt/phpki/phpki-store/CA/newcerts';
+
+GetOptions(
+    "index=s" => \$index,
+    "path=s"  => \$path
+);
+
+open INDEX, "$index" or die "Couldn't open $index\n";
+
+my $json;
+
+foreach my $l (<INDEX>){
+    next unless $l =~ m/^([VR])\t\d+Z\t(\d+Z)?\t(\w+)\tunknown\t.*/;
+    my $status = $1;
+    my $serial = $3;
+    my $cert = Crypt::OpenSSL::X509->new_from_file( "$path/$serial.pem" );
+
+    my $expire_in = int ((str2time($cert->notAfter())-time())/(3600*24));
+    if ($status eq 'V'){
+        $status = 'valid';
+    }
+    elsif ($expire_in lt 0){
+        $status = 'expired';
+    }
+    else{
+        $status = 'revoked';
+    }
+    my $subject = $cert->subject;
+    $subject =~ m/.*\sCN=(.*),/;
+    my $cn = $1;
+
+    push @{$json->{data}}, {
+          "{#CRTCN}" => $cn,
+          "{#CRTSERIAL}" => $serial,
+          "{#CRTSTATUS}" => $status,
+    };
+}
+close INDEX;
+print to_json($json);