#!/bin/sh
# check_le v1.0  (c) 19.6.2019 by Andreas Ley  (u) 10.2.2020
# 

usage()
{
	echo "Usage: `basename $0` [-v] FQDN [...]" >&2
	echo "-v  verbose mode" >&2
	exit 1
}

set -- `getopt hxv $*` || usage

trace=false
verbose=false
while :; do
	case $1 in
		-h)	sed '1d;s/^# *//;/^$/q' $0; usage;;
		-x)	set -x; trace=true; shift;;
		-v)	verbose=true; shift;;
		--)	shift; break;;
	esac
done

test $# -eq 0 && usage

trace=false
verbose=false
while getopts f:hxv OPTION; do
	case ${OPTION} in
		h)	sed '1d;s/^# *//;/^$/q' $0; usage;;
		x)	set -x; trace=true;;
		v)	verbose=true;;
		f)	file="${OPTARG}";;
		?)	usage;;
	esac
done
_XPG=1 shift $((${OPTIND} - 1))
test $# -eq 0 && usage

#tmpname="`test -x /usr/machine/bin/mktemp && /usr/machine/bin/mktemp -c || /bin/mktemp`"
tmpname="`/bin/mktemp`"
trap "rm -f \"${tmpname}\"" 0 1 2 3 15

if echo "\c" | grep "c" >/dev/null; then
	echon='-n'
	echoc=''
else
	echon=''
	echoc='\c'
fi

for fqdn; do
	echo
	echo "*** $fqdn ***"
	echo
	ps faxww | grep "[d]ehydrated.*$fqdn"
	if test -e /var/www/$fqdn/conf/ssl/dehydrated/cert.pem; then
		openssl x509 -in /var/www/$fqdn/conf/ssl/dehydrated/cert.pem -noout -dates -ext subjectAltName
	else
		host $fqdn
	fi
done

exit 0
