add certificate validity check in startagent

2021-05-19 23:31:28 +02:00 · 2021-05-19 23:31:28 +02:00 · b85250cd11
commit b85250cd11
parent 52626b5a09
1 changed files with 3 additions and 0 deletions
--- a/bin/startagent
+++ b/bin/startagent
@ -277,6 +277,9 @@ agent-load-identity-keys () {
                        echo "pubkey without privkey: $pubkey"
                        pubkeysonly+=($pubkey)
                    fi
+                    [ -e "${pubkey%.pub}-cert.pub" ] && \
+                        [ $(date +%s -d $(ssh-keygen -L -f "${pubkey%.pub}-cert.pub"|awk '$1 == "Valid:"{print $5}')) -le $(date +%s -d NOW) ] \
+                        || logwarn "CERTIFICATE IS NOT VALID ANYMORE: ${pubkey%.pub}-cert.pub"
                done
                loginfo "pubkeysonly: ${pubkeysonly[@]} (count: ${#pubkeysonly[*]})"