监控域名HTTPS证书过期时间脚本

脚本一

#!/bin/bash
#https所在主机的IP
host=$1
#https端口，默认是443
port=${2:-"443"}

end_date=`timeout 6 openssl s_client -host $host -port $port -showcerts  </dev/null 2>/dev/null |
        sed -n '/BEGIN CERTIFICATE/,/END CERT/p' |
        openssl x509 -text 2> /dev/null |
        sed -n 's/ *Not After : *//p'`

if [ -n "$end_date" ];then
   # 把时间转换为时间戳
   end_date_seconds=`date '+%s' --date "$end_date"`
   # 获取当前时间
   now_seconds=`date '+%s'`
   echo "($end_date_seconds-$now_seconds)/24/3600" | bc
fi

脚本二

#! /usr/bin/env bash
#https所在主机的IP
host=$1
#https端口，默认是443
port=${2:-"443"}

end_date=`echo | timeout 6 openssl s_client -servername ${host} -connect ${host}:${port} 2>/dev/null |
 openssl x509 -noout -dates | grep notAfter | awk -F "=" '{print $NF}'`

if [ -n "$end_date" ];then
   # 把时间转换为时间戳
   end_date_seconds=`date '+%s' --date "$end_date"`
   # 获取当前时间
   now_seconds=`date '+%s'`
   echo "($end_date_seconds-$now_seconds)/24/3600" | bc
fi

使用：
[root@localhost ~]# sh 1.txt 172.21.36.70 443
3618
[root@localhost ~]#