Verify X.509 certificate and key match

check-certkey.sh

#!/bin/bash

if [[ $# -ne 2 ]]; then
    echo "Usage: $(basename $0) CERTFILE KEYFILE"
    exit 1
fi

certpath="$1"
keypath="$2"

certmod=$(openssl x509 -modulus -noout -in "$certpath")
keymod=$(openssl rsa -modulus -noout -in "$keypath")

#echo "Cert modulus: $certmod"
#echo "Key modulus:  $keymod"

if [[ "$certmod" != "$keymod" ]]; then
    echo -e "\e[31mERROR: Key and certificate do not match!\e[m"
    exit 2
fi

echo -e "\e[32mOK: Key and certificate match.\e[m"
exit 0