cert_key_match.sh

#!/bin/sh

#
# Simple utility to check that all *.crt files match corresponding *.key's
#

for FILE in *.crt; do
    CERT="$FILE"
    KEY="${FILE%crt}key"

    if [ ! -f "$KEY" ]; then
        continue
    fi

    MODULUS_CERT="$(openssl x509 -noout -modulus -in $CERT)"
    MODULUS_KEY="$(openssl rsa -noout -modulus -in $KEY)"

    if [ "$MODULUS_CERT" != "$MODULUS_KEY" ]; then
        echo "MISMATCH: $CERT <-> $KEY"
    fi
done