^^&&^^

Edit File: ssl_crt_status

#!/usr/local/cpanel/3rdparty/bin/perl
# cpanel - scripts/ssl_crt_status                    Copyright 2013 cPanel, Inc.
#                                                           All rights Reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

use Cpanel::SSLPath    ();
use Cpanel::SSLInfo    ();
use Getopt::Param      ();
use Cpanel::StringFunc ();
use Cpanel::ArrayFunc  ();
use Term::ANSIColor    ();
use Cpanel::Config     ();
use Cpanel::Hostname   ();

my $param = Getopt::Param->new(
    {
        'quiet'        => 0,
        'help_coderef' => sub {
            print <<"END_HELP";
$0 - give a status report of the server's SSL certificates

--help          this screen
    --verbose       show more than just errors
    --verbose=long  include verification result of valid crts

By default it will check every domain, you can specify one or more specific
domains to check by passing one or more --domain flags:

--domain=your.domain.here --domain=other.domain.here

END_HELP
            exit;
        },
    }
);

my @domains = Cpanel::ArrayFunc::uniq_from_arrayrefs( [ $param->exists_param('domain') ? $param->get_param('domain') : ( Cpanel::Hostname::gethostname(), grep( !/^\*/, sort keys %{ Cpanel::Config::loaduserdomains_normal() } ) ) ] );

if ( grep /^--domain$/, @domains ) {
    print "Domain must be unambiguously specified in this format --domain=fqdn.tld\n\n";
    $param->help();
}

my $sslroot = Cpanel::SSLPath::getsslroot();

print "[info] SSL root: $sslroot\n" if $param->get_param('verbose');

if ( $param->get_param('debug') ) {
    require Data::Dumper;
}

# fetchinfo() is and verifysslcert() may still be "loud"
close STDERR;    # just to be on the safe side
open STDERR, '>', '/dev/null';

for my $domain (@domains) {
    my $ssl_info_hr = Cpanel::SSLInfo::fetchinfo($domain);

if ( $param->get_param('debug') ) {
        print Data::Dumper::Dumper($ssl_info_hr);
    }
    if ( $ssl_info_hr->{'statusmsg'} =~ /^No certificate for the domain \S+ could be found[.]$/ ) {
        if ( $param->get_param('verbose') ) {
            print Term::ANSIColor::color 'bold blue';
            print "Ok: $domain does not have an SSL crt\n";
            print Term::ANSIColor::color 'reset';
        }
    }
    else {
        my ( $rc, $msg ) = Cpanel::SSLInfo::verifysslcert(
            $sslroot,
            $ssl_info_hr->{'crt'},
            $ssl_info_hr->{'key'},
            $ssl_info_hr->{'cab'},
            1,    # makes verifysslcert() not do any print()s
            1,    # makes verifysslcert() return plain text instead of HTML
        );

if ($rc) {
            print Term::ANSIColor::color 'bold green';
            print "Ok: $domain SSL crt verified\n" if $param->get_param('verbose');
            print Term::ANSIColor::color 'reset';
            print Cpanel::StringFunc::indent_string($msg) if $param->get_param('verbose') eq 'long';
        }
        else {
            print Term::ANSIColor::color 'bold red';
            print "Error: $domain SSL crt verification failed:\n";
            print Term::ANSIColor::color 'reset';
            print Cpanel::StringFunc::indent_string($msg);
        }
    }
}