ssddanbrown / sslcheck

Simple PHP script to check SSL expiry

sslcheck

A simple php script to check the expiry of SSL certificates.

Requirements

• PHP (Including CLI support).
• OpenSSL

This script has been tested only on Ubuntu 16.04+ using PHP7.

Usage

1. Clone this repo or simply download the sslcheck file.
2. Ensure the sslcheck file is executable (chmod a+x sslcheck).
3. Execute the script ./sslcheck www.example.com.

If you can't execute the script directly you may need to envoke the script via php (php sslcheck www.example.com);

You can check multiple domains by listing them all out when running the script:

sslcheck www.google.com www.example.com www.github.com

If a domain is found to have multiple A or AAAA records then each will be checked individually and the IP will be shown alongside the domain in the output.

Usage via Email

The file email-example.sh is a simple script showing how this can be used via email. Simply read the comments at the top of the script and change the configuration variables to set it up. If the mail command is not available on your system you may need to install it (ubuntu: sudo apt-get install mailutils). A good idea would be to set this up as a cron job to send a weekly report.

sslcheck's Issues

integrating with itflow

any chance this can be integrated with itflow certificates page?
https://github.com/johnnyq/itflow/blob/master/client_certificates.php

atm, the validity dates have to be inserted manually, but will be nice to get the sslcheck automatically from the domains page
https://github.com/johnnyq/itflow/blob/master/client_domains.php

any chance can you have a look at this please?

Thank you!

round robin dns support

please lookup all A and AAAA records, then check the cert of each host and IP.

FAILED TO GET CERTIFICATE INFORMATION

I receive the below error when attempting to run this for my customer. Any ideas?

---

Errors:

mail.customer.com.au:ipaddress :: FAILED TO GET CERTIFICATE INFORMATION

Would be nice if it only sends email when..

Would be nice if it only sends email when cert is xx days to next renewal date.

Incredibly useful but a timezone issue

Hi ssddanbrown,

I found this incredibly useful and adapted it run directly from the browser.

One small issue I found was that the certificates are operating in UTC whereas the $now date is in local time.
I made a change to show hours remaining when less than one day and this highlighted the issue.

The fix was simple: $now = new DateTime(UTC);

Regards
Richard Dobie