return
fi
- openssl x509 -text -noout -fingerprint -in $1 | grep "^SHA1 Fingerprint="
+ openssl x509 -text -noout -fingerprint -in $1 | grep "^SHA1 Fingerprint=" | \
+ sed -e 's/^SHA1 Fingerprint=//'
+}
+
+# Print a fingerprint with correct padding.
+function print_fingerprint {
+ if [ -z "$2" ]; then
+ return
+ fi
+
+ len="`echo $1 | wc -c`"
+ offset="$((85 - $len))"
+ printf "$1: %${offset}s\n" "$2"
}
# Master:
if [ -d "/var/lib/puppetmaster/ssl/ca/signed" ]; then
for file in `ls /var/lib/puppetmaster/ssl/ca/signed`; do
fp="`puppet_openssl /var/lib/puppetmaster/ssl/ca/signed/$file`"
- echo "`basename $file .pem`: $fp"
+ print_fingerprint `basename $file .pem` $fp
done
fi
if [ -f "/var/lib/puppetmaster/ssl/certs/ca.pem" ]; then
- echo "ca: `puppet_openssl /var/lib/puppetmaster/ssl/certs/ca.pem`"
+ print_fingerprint ca `puppet_openssl /var/lib/puppetmaster/ssl/certs/ca.pem`
fi
fi
#
if [ -d "/var/lib/puppet/ssl" ]; then
fqdn="`facter fqdn`"
- fp="`puppet_openssl /var/lib/puppet/ssl/certs/$fqdn.pem`"
- echo "$fqdn: $fp"
-
- echo "ca: `puppet_openssl /var/lib/puppet/ssl/certs/ca.pem`"
+ print_fingerprint $fqdn `puppet_openssl /var/lib/puppet/ssl/certs/$fqdn.pem`
+ print_fingerprint ca `puppet_openssl /var/lib/puppet/ssl/certs/ca.pem`
fi