x509watch

This release works around the Y2K38 problem on systems with older 32-bit Perl. It excludes the new Root CA bundle "ca-bundle.trust.crt" in Fedora. It updates the copy of the GNU GPLv2 to reflect the new FSF address.

Mail from the cron job with x509watch output is now in the style of logwatch.

Avoid any dying when files are possibly encountered a second time. Inaccessible files or dangling symlinks will now cause only warnings. An option to include specified files (not only directories) has been added. An option to ignore (including globbing) specified files has been added. /etc/ssl has been added to default PKI paths (openSUSE, Debian, and Ubuntu). More distribution Root Certifiate Authority bundles are excluded. An option to suppress all access/dangling symlink warnings has been added.

This release replaces the find(1) call (from fileutils) with Perl's File::Find. It executes /usr/bin/openssl rather than openssl in $PATH by default; an alternative path to the OpenSSL binary can be set via a parameter. It uses IPC::Open3 rather than open() to pipe certificates to OpenSSL. It replaces the remaining open() with sysopen() for better file handling.

This is the first public release.