projects / apple / security.git / blame
| Commit | Line | Data |
|---|---|---|
| d8f41ccd A |
1 | #! /bin/csh -f |
| 2 | # | |
| 3 | # Test certs; if expired, replace them via ssl PING | |
| 4 | # | |
| 5 | # usage: updateCert sslHost certFileBase cert... | |
| 6 | # | |
| 7 | # tweak this manually for debug | |
| 8 | set VERBOSE=NO | |
| 9 | # | |
| 10 | if ( $#argv < 3 ) then | |
| 11 | echo "Usage: updateCert sslHost certFileBase cert..." | |
| 12 | exit(1) | |
| 13 | endif | |
| 14 | set sslHost=$argv[1] | |
| 15 | shift | |
| 16 | set certFileBase=$argv[1] | |
| 17 | shift | |
| 18 | set certArgs="-c $argv[1]" | |
| 19 | shift | |
| 20 | while ( $#argv > 0 ) | |
| 21 | set certArgs="$certArgs -c $argv[1]" | |
| 22 | shift | |
| 23 | end | |
| 24 | set OUTFILE=$LOCAL_BUILD_DIR/.certVerifyOut | |
| 25 | if($VERBOSE == YES) then | |
| 26 | echo Testing $certArgs | |
| 27 | endif | |
| 28 | $LOCAL_BUILD_DIR/certcrl $certArgs -s >& $OUTFILE | |
| 29 | grep TP_CERT_EXPIRED $OUTFILE | |
| 30 | if($status == 1) then | |
| 31 | if($VERBOSE == YES) then | |
| 32 | echo "These certs look good." | |
| 33 | endif | |
| 34 | exit(0) | |
| 35 | endif | |
| 36 | echo "@@@ Warning: replacing certs for $sslHost @@@" | |
| 37 | $LOCAL_BUILD_DIR/sslViewer $sslHost f $certFileBase | |
| 38 | if($status == 1) then | |
| 39 | echo "@@@ Error obtaining new cert for $sslHost @@@" | |
| 40 | else | |
| 41 | echo ...certs replaced for $sslHost in `pwd` | |
| 42 | endif |