Certificate:Quick check

This is a quick and dirty perl program to output the compare string so that it is easy to see why the cert is being regenerated. It comes from http://bugs.contribs.org/show_bug.cgi?id=1602#c36 vim check_certificate and paste this

#!/usr/bin/perl

require esmith::ConfigDB;
my $conf_db = esmith::ConfigDB->open;

my $FQDN = $conf_db->get_prop('SystemName', 'type') . "." . $conf_db->get_prop('DomainName', 'type');
my $crt = "/home/e-smith/ssl.crt/$FQDN.crt";
my $defaultCity = $conf_db->get_prop('ldap', 'defaultCity');
my $defaultCompany = $conf_db->get_prop('ldap', 'defaultCompany');
my $defaultDepartment = $conf_db->get_prop('ldap', 'defaultDepartment');
my $email = "admin\@$FQDN";

my $expected_issuer = '/C=--' .

'/ST=----' . "/L=$defaultCity" . "/O=$defaultCompany" . "/OU=$defaultDepartment" . "/CN=$FQDN" . "/emailAddress=$email";

my $issuer = `openssl x509 -issuer -noout -in $crt`;
chomp $issuer;
$issuer =~ s/^issuer= //;
if ($issuer eq $expected_issuer)
{

print "Certificates matchi.\n";

} else {

print "Certificates don't match.\n"; print "$issuer\n"; print "$expected_issuer\n";

}

then

chmod u+x check_certificate

if you want to use it

./check_certificate

it displays

# ./check_certificate
Certificates don't match.
/C=--/ST=----/L=Rodez/O=Famille de Labrusse/OU=Branche de didier de Labrusse/CN=sme9.stephdl.xxxx.org/emailAddress=admin@stephdl.xxxx.org
/C=--/ST=----/L=Rodez/O=Famille de Labrusse/OU=Branche de didier de Labrusse/CN=sme9.stephdl.xxxx.org/emailAddress=admin@sme9.stephdl.xxxx.org