#!/bin/sh

carp=$(/sbin/ifconfig carp0 2>/dev/null | grep 'status' | cut -d' ' -f2)

if [ "$carp" = "backup" ]; then
    exit 0
fi

echo "Warning : all times are in UTC !\n"

echo "CA certificate:"
openssl x509 -enddate -noout -in /etc/shellpki/cacert.pem \
    | cut -d '=' -f 2 \
    | sed -e "s/^\(.*\)\ \(20..\).*/- \2 \1/"

echo ""

echo "Client certificates:"
grep "Not After" -r /etc/shellpki/certs/ \
    | sed -e "s/^.*certs\/\([-._@a-zA-Z0-9]*\).*After\ :\ \(.*\).*GMT$/\2\1X/" \
    | sed -e "s/^\(.*\)\ \(20..\)\ \(.*\)$/- \2 \1 \3/" \
    | tr "X" "\n" \
    | sed '/^$/d' \
    | sort -n -k 2 -k 3M -k 4