{"id":316,"date":"2022-05-02T18:45:21","date_gmt":"2022-05-02T18:45:21","guid":{"rendered":"https:\/\/www.jibsheet.net\/linux\/?p=316"},"modified":"2022-05-02T18:45:21","modified_gmt":"2022-05-02T18:45:21","slug":"bash-script-to-check-ssl-expiration","status":"publish","type":"post","link":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/","title":{"rendered":"Bash script to check SSL expiration"},"content":{"rendered":"<p>Script you can run in a cron<\/p>\n<ul>\n<li>Several thing of note:\u00a0 when getting the SSL information &#8211; you have to echo a &#8220;q&#8221; because the openssl is interactive.<\/li>\n<li>To covert from timestamp to formatted date &#8211; use the @ symbol<\/li>\n<li>date -d @$timestamp_item &#8216;+%Y-%m-%d&#8217;<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">#!\/bin\/bash\r\nTARGET=\"www.website.net\";\r\nRECIPIENT=\"admin@websit.net\";\r\nDAYS=7;\r\necho \"checking if $TARGET expires in less than $DAYS days\";\r\nssl_out=$(echo \"q\" |openssl s_client -connect $TARGET:443  2&gt;\/dev\/null | openssl x509 -noout -dates);\r\nawk_out=$(echo $ssl_out | awk -F'=' '{ print $3 }');\r\necho \"expration date is  $awk_out\";\r\nexpirationdate=$( date -d \"$awk_out\" '+%s');\r\nin7days=$(($(date +%s) + (86400*$DAYS)));\r\necho \"exp: $experationdate\";\r\necho \"in7: $in7days\";\r\nfmt_exp_date=$(date -d \"$awk_out\" '+%Y-%m-%d');\r\necho \"7 days,  $(date -d @$in7days '+%Y-%m-%d')  \";\r\nif [ $in7days -gt $expirationdate ]; then\r\n    echo \"here\";\r\n    echo \"KO - Certificate for $TARGET expires in less than $DAYS days, on $(date -d @$expirationdate '+%Y-%m-%d')\";\r\n    mail -s \"Certificate expiration warning for $TARGET, on $fmt_exp_date\" $RECIPIENT &lt;&lt;&lt; \"Certifcate expiry on $fmt_exp_date \" ;\r\nelse\r\n    echo \"OK - Certificate expires on $fmt_exp_date\";\r\nfi;\r\n<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Script you can run in a cron Several thing of note:\u00a0 when getting the SSL information &#8211; you have to echo a &#8220;q&#8221; because the openssl is interactive. To covert from timestamp to formatted date &#8211; use the @ symbol date -d @$timestamp_item &#8216;+%Y-%m-%d&#8217; &nbsp; #!\/bin\/bash TARGET=&#8221;www.website.net&#8221;; RECIPIENT=&#8221;admin@websit.net&#8221;; DAYS=7; echo &#8220;checking if $TARGET expires in less than $DAYS days&#8221;; ssl_out=$(echo [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[22],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff\" \/>\n<meta property=\"og:description\" content=\"Script you can run in a cron Several thing of note:\u00a0 when getting the SSL information &#8211; you have to echo a &#8220;q&#8221; because the openssl is interactive. To covert from timestamp to formatted date &#8211; use the @ symbol date -d @$timestamp_item &#8216;+%Y-%m-%d&#8217; &nbsp; #!\/bin\/bash TARGET=&quot;www.website.net&quot;; RECIPIENT=&quot;admin@websit.net&quot;; DAYS=7; echo &quot;checking if $TARGET expires in less than $DAYS days&quot;; ssl_out=$(echo [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\" \/>\n<meta property=\"og:site_name\" content=\"Jon Allen&#039;s Linux Stuff\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-02T18:45:21+00:00\" \/>\n<meta name=\"author\" content=\"jonallen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"jonallen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\"},\"author\":{\"name\":\"jonallen\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993\"},\"headline\":\"Bash script to check SSL expiration\",\"datePublished\":\"2022-05-02T18:45:21+00:00\",\"dateModified\":\"2022-05-02T18:45:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\"},\"wordCount\":55,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993\"},\"articleSection\":[\"bash\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\",\"url\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\",\"name\":\"Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff\",\"isPartOf\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#website\"},\"datePublished\":\"2022-05-02T18:45:21+00:00\",\"dateModified\":\"2022-05-02T18:45:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.jibsheet.net\/linux\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bash script to check SSL expiration\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#website\",\"url\":\"https:\/\/www.jibsheet.net\/linux\/\",\"name\":\"Jon Allen's Linux Stuff\",\"description\":\"Howto&#039;s, Observations, and stuff\",\"publisher\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.jibsheet.net\/linux\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993\",\"name\":\"jonallen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7d7c061ce9db8f5e4710555585475882?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7d7c061ce9db8f5e4710555585475882?s=96&d=mm&r=g\",\"caption\":\"jonallen\"},\"logo\":{\"@id\":\"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/image\/\"},\"sameAs\":[\"https:\/\/www.jibsheet.net\/linux\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/","og_locale":"en_US","og_type":"article","og_title":"Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff","og_description":"Script you can run in a cron Several thing of note:\u00a0 when getting the SSL information &#8211; you have to echo a &#8220;q&#8221; because the openssl is interactive. To covert from timestamp to formatted date &#8211; use the @ symbol date -d @$timestamp_item &#8216;+%Y-%m-%d&#8217; &nbsp; #!\/bin\/bash TARGET=\"www.website.net\"; RECIPIENT=\"admin@websit.net\"; DAYS=7; echo \"checking if $TARGET expires in less than $DAYS days\"; ssl_out=$(echo [&hellip;]","og_url":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/","og_site_name":"Jon Allen&#039;s Linux Stuff","article_published_time":"2022-05-02T18:45:21+00:00","author":"jonallen","twitter_card":"summary_large_image","twitter_misc":{"Written by":"jonallen","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#article","isPartOf":{"@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/"},"author":{"name":"jonallen","@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993"},"headline":"Bash script to check SSL expiration","datePublished":"2022-05-02T18:45:21+00:00","dateModified":"2022-05-02T18:45:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/"},"wordCount":55,"commentCount":0,"publisher":{"@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993"},"articleSection":["bash"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/","url":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/","name":"Bash script to check SSL expiration - Jon Allen&#039;s Linux Stuff","isPartOf":{"@id":"https:\/\/www.jibsheet.net\/linux\/#website"},"datePublished":"2022-05-02T18:45:21+00:00","dateModified":"2022-05-02T18:45:21+00:00","breadcrumb":{"@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.jibsheet.net\/linux\/index.php\/2022\/05\/02\/bash-script-to-check-ssl-expiration\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.jibsheet.net\/linux\/"},{"@type":"ListItem","position":2,"name":"Bash script to check SSL expiration"}]},{"@type":"WebSite","@id":"https:\/\/www.jibsheet.net\/linux\/#website","url":"https:\/\/www.jibsheet.net\/linux\/","name":"Jon Allen's Linux Stuff","description":"Howto&#039;s, Observations, and stuff","publisher":{"@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.jibsheet.net\/linux\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/295a80d0b2aa929b648c4fdddee83993","name":"jonallen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7d7c061ce9db8f5e4710555585475882?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7d7c061ce9db8f5e4710555585475882?s=96&d=mm&r=g","caption":"jonallen"},"logo":{"@id":"https:\/\/www.jibsheet.net\/linux\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/www.jibsheet.net\/linux"]}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/posts\/316"}],"collection":[{"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/comments?post=316"}],"version-history":[{"count":1,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/posts\/316\/revisions"}],"predecessor-version":[{"id":317,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/posts\/316\/revisions\/317"}],"wp:attachment":[{"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/media?parent=316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/categories?post=316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jibsheet.net\/linux\/index.php\/wp-json\/wp\/v2\/tags?post=316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}