验证是否与秘钥匹配¶

验证证书请求是否与秘钥匹配:

#!/bin/sh
if [[ "$1" = "" || "$2" = ""  ]]; then
  echo "certRequestCheck.sh  requestfile keyfile "
  exit 0;
else
  value=`openssl req -text -noout -in $1  | grep "Public Key Algorithm:" | awk  -F ':'  'BEGIN {}  {print $2} END {}'`


  if [ "$value" = " rsaEncryption" ] ; then
    echo $value

    requestModuleMd5=`openssl req -modulus -in $1 | grep Modulus | openssl md5`
    privateModuleMd5=`openssl rsa -noout -modulus -in $2 | openssl md5`

  else
    `openssl ec -in $2 -pubout -out ecpubkey.pem `
    privateModuleMd5=`cat ecpubkey.pem | openssl md5`
    requestModuleMd5=`openssl req -in $1  -pubkey  -noout | openssl md5`

  fi
  if [  "$requestModuleMd5" = "$privateModuleMd5" ] ; then
    echo "ok"
  fi

fi

验证公钥证书是否和秘钥匹配:

#!/bin/sh
if [[ "$1" = "" || "$2" = "" ]]; then
  echo "certCheck.sh  certfile keyfile"
  exit 0;
else
  #certModuleMd5=`openssl x509 -noout -modulus -in $1 | openssl md5`
  #privateModuleMd5=`openssl rsa -noout -modulus -in $2 | openssl md5`


        #if [  "$certModuleMd5" = "$privateModuleMd5" ] ; then
        #        echo "ok"
  #else
  # echo "not ok"
        #fi
        value=`openssl x509 -text -noout -in $1  | grep "Public Key Algorithm:" | awk  -F ':'  'BEGIN {}  {print $2} END {}'`

        if [ "$value" = " rsaEncryption" ] ; then
                echo $value

                requestModuleMd5=`openssl x509 -modulus -in $1 | grep Modulus | openssl md5`
                privateModuleMd5=`openssl rsa -noout -modulus -in $2 | openssl md5`

        else
                `openssl ec -in $2 -pubout -out ecpubkey.pem `
                privateModuleMd5=`cat ecpubkey.pem | openssl md5`
                requestModuleMd5=`openssl x509 -in $1  -pubkey  -noout | openssl md5`

        fi
        if [  "$requestModuleMd5" = "$privateModuleMd5" ] ; then
                echo "ok"
        fi
fi