openssl x509 -in $pem_file -noout -dates

    1. # dir='/wls/k8s/';
    2. # k8s_ip=$2
    3. dir=$1
    4. if [[ ! -d $dir ]];
    5. then
    6.     echo "## ERROR, dir: $dir does not exist" 
    7.     exit 1
    8. fi
    10. TEMPORAY_PEM_FILE='ops_kraken_crontab_pem.md'
    12. find "$dir" -name *.pem|grep -v "key" >$TEMPORAY_PEM_FILE;
    13. ## 通常 *-key.pem 的是 私钥文件
    14. for pem_file in `cat $TEMPORAY_PEM_FILE|grep k8s`;
    15. do 
    16.     echo "";
    17.     dateStr=`openssl x509 -in $pem_file -noout -dates|grep notAfter $raw_datestr | awk -F'=' '{print $2}'`;
    18.     short_date=`date --date="$dateStr" --utc +"%Y-%m-%d %H:%M:%S"`
    19.     echo "## pem.file: "$pem_file"  expire_time: "$short_date
    21. done;
    22. rm -rf $TEMPORAY_PEM_FILEF

    image.png

    报错 unable to load certificate， 参考如下链接
    https://stackoverflow.com/questions/64768877/openssl-unable-to-load-certificate