displays every cert in the trust chain in PEM file

supposedly can take a PEM file with the trust chain components (i.e.
certificates) in any order, since one cannot count on the order they are
found in.  have not tested this, but it did display well for the one
file i needed to see all the certs in.

diff --git a/scripts/security/show_all_cert_chains.sh b/scripts/security/show_all_cert_chains.sh
new file mode 100644 (file)
index 0000000..1fe4125
--- /dev/null
+++ b/scripts/security/show_all_cert_chains.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+file="$1"; shift
+if [ -z "$file" -o ! -f "$file" ]; then
+  echo This script requires a PEM-format file name to show the certificates within.
+  exit 1
+fi
+
+openssl crl2pkcs7 -nocrl -certfile "$file" | openssl pkcs7 -print_certs -text -noout
+