1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
#!/usr/bin/env php
<?php
function notify($text) {
$fields = [
'chat_id' => TELEGRAM_CHAT_ID,
'text' => $text,
];
$ch = curl_init();
$url = 'https://api.telegram.org/bot'.TELEGRAM_BOT_TOKEN.'/sendMessage';
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);
curl_exec($ch);
curl_close($ch);
}
$domains = [
'example.com',
'example.org',
// add domains here
];
$now = time();
const TELEGRAM_CHAT_ID = 0;
const TELEGRAM_BOT_TOKEN = '';
foreach ($domains as $d) {
$ipv4 = gethostbyname($d);
if ($ipv4 == $d) {
echo $d.": gethostbyname did not found ipv4\n";
continue;
}
$get = stream_context_create([
'ssl' => [
'capture_peer_cert' => true,
'verify_peer' => false,
'verify_peer_name' => false,
'allow_self_signed' => true,
'verify_depth' => 0,
]
]);
$read = stream_socket_client('ssl://'.$d.':443', $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $get);
$cert = stream_context_get_params($read);
$certinfo = openssl_x509_parse($cert['options']['ssl']['peer_certificate']);
$valid_to = $certinfo['validTo_time_t'];
if ($valid_to - $now < 86400*7) {
$text = "SSL-сертификат для {$d} истекает ".date('d.m.Y H:i:s', $valid_to);
notify($text);
}
}
|
