#! /usr/bin/python
# -*- coding:utf-8 -*-
#此腳本用來獲取https證書過期時(shí)間,發(fā)送網(wǎng)管告警
#需要先執(zhí)行pip install pyopenssl
from urllib3.contrib import pyopenssl as reqs;
from datetime import datetime;
import os
#公網(wǎng)驗(yàn)證域名返回到期時(shí)間
def get_notafter(DomainName):
    cert = reqs.OpenSSL.crypto.load_certificate(reqs.OpenSSL.crypto.FILETYPE_PEM, reqs.ssl.get_server_certificate((DomainName, 443)));
    notafter = datetime.strptime(cert.get_notAfter().decode()[0:-1], '%Y%m%d%H%M%S');
    remain_days = notafter - datetime.now();
    #print(DomainName, '證書到期天數(shù)是：', remain_days.days);
    return remain_days.days
#判斷到期時(shí)間發(fā)送網(wǎng)管告警
def IfDate(DomainName,DomainNameExpired,CheckTime):
   if int(DomainNameExpired) < CheckTime:
      GetDomainMsg = "https://" + DomainName +  " 證書還剩余到期天數(shù)是: "+ str(DomainNameExpired) +" days"  
      os.system("/bin/logger -p local0.crit \"ccod: result=ERROR "+  GetDomainMsg  + " \"") 
#主函數(shù)
def Main(DomainNameList,CheckTime):
    for DomainName  in DomainNameList:
        try:
            DomainNameExpired = get_notafter(DomainName);
        except Exception as e:
            ErrorMsg = "請(qǐng)檢查 https://"+ DomainName +" 域名是否正確或者網(wǎng)絡(luò)可達(dá)性"
            print(ErrorMsg)
        IfDate(DomainName,DomainNameExpired,CheckTime)
if __name__ == "__main__":
   #設(shè)置要檢查的域名列表
   DomainNameList = ["baidu.com","jd.com"]
   #設(shè)定檢查域名到期告警時(shí)間
   CheckTime = 40
   #運(yùn)行主函數(shù)
   Main(DomainNameList,CheckTime)