pastk/organicmaps
1
Fork 0
forked from organicmaps/organicmaps
Code Pull requests Activity

Merge pull request #10781 from ToshUxanoff/certificate-check

Browse source 
[tools] add check mode to certificate check tool
This commit is contained in:
Victor Popov 2019-04-26 11:53:01 +03:00 • committed by GitHub
commit 10ce023bd3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
tools/unix/check_cert.sh Executable file → Normal file
View file

@ -1,9 +1,14 @@
#!/bin/bash
exit 0
MONTHS_BEFORE_EXPIRATION_TO_BREAK="3"
DAYS_WARNING_INTERVAL="14"
PRIVATE_H=$1
if [[ "$PRIVATE_H" == "" ]]; then\
MODE=$2
if [[ "$MODE" == "" ]]; then
exit 0
fi
if [[ "$PRIVATE_H" == "" ]]; then
PRIVATE_H=$(dirname $0)/../../private.h
fi
@ -28,11 +33,21 @@ read mon day time year tz < <(
)
if [[ $(uname) == "Darwin" ]]; then
warning_timestamp=`LANG=C LC_ALL=C date -j -v "+${MONTHS_BEFORE_EXPIRATION_TO_BREAK}m" -v "+${DAYS_WARNING_INTERVAL}d" +%s`
threshold_timestamp=`LANG=C LC_ALL=C date -j -v "+${MONTHS_BEFORE_EXPIRATION_TO_BREAK}m" +%s`
cert_end_timestamp=`LANG=C LC_ALL=C date -j -f "%Y %b %d %H:%M:%S %Z" "$year $mon $day $time $tz" +%s`
else
threshold_timestamp=`date --date "+$MONTHS_BEFORE_EXPIRATION_TO_BREAK months" +%s`
cert_end_timestamp=`date --date "$mon $day $year $time $tz" +%s`
warning_timestamp=`LANG=C LC_ALL=C date --date "+${MONTHS_BEFORE_EXPIRATION_TO_BREAK}month ${DAYS_WARNING_INTERVAL}days" +%s`
threshold_timestamp=`LANG=C LC_ALL=C date --date "+$MONTHS_BEFORE_EXPIRATION_TO_BREAK months" +%s`
cert_end_timestamp=`LANG=C LC_ALL=C date --date "$mon $day $year $time $tz" +%s`
fi
if [[ "$MODE" == "check" ]]; then
if [[ "$warning_timestamp" -gt "$cert_end_timestamp" ]]; then
echo "Our client certificate end date of $mon $day $time $year $tz is within ${MONTHS_BEFORE_EXPIRATION_TO_BREAK} month {DAYS_WARNING_INTERVAL} days from now."
echo "Update this certificate!"
echo "Warning"
exit 1
fi
fi
if [[ "$threshold_timestamp" -gt "$cert_end_timestamp" ]]; then
echo "Our client certificate end date of $mon $day $time $year $tz is within $MONTHS_BEFORE_EXPIRATION_TO_BREAK months from now."