-
-
Save th3gundy/fc76a9d34599e2fdaa923021092e00ba to your computer and use it in GitHub Desktop.
Python script to check on SSL certificates
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # -*- encoding: utf-8 -*- | |
| # requires a recent enough python with idna support in socket | |
| # pyopenssl, cryptography and idna | |
| from OpenSSL import SSL | |
| from cryptography import x509 | |
| from cryptography.x509.oid import NameOID | |
| import idna | |
| from socket import socket | |
| from collections import namedtuple | |
| HostInfo = namedtuple(field_names='cert hostname peername address', typename='HostInfo') | |
| def verify_cert(cert, hostname): | |
| # verify notAfter/notBefore, CA trusted, servername/sni/hostname | |
| cert.has_expired() | |
| # service_identity.pyopenssl.verify_hostname(client_ssl, hostname) | |
| # issuer | |
| def get_certificate(hostname, port, address): | |
| hostname_idna = idna.encode(hostname) | |
| sock = socket() | |
| try: | |
| sock.settimeout(3) | |
| sock.connect((hostname, port)) | |
| sock.settimeout(None) | |
| peername = sock.getpeername() | |
| ctx = SSL.Context(SSL.SSLv23_METHOD) # most compatible | |
| ctx.check_hostname = False | |
| ctx.verify_mode = SSL.VERIFY_NONE | |
| sock_ssl = SSL.Connection(ctx, sock) | |
| sock_ssl.set_connect_state() | |
| sock_ssl.set_tlsext_host_name(hostname_idna) | |
| sock_ssl.do_handshake() | |
| cert = sock_ssl.get_peer_certificate() | |
| crypto_cert = cert.to_cryptography() | |
| sock_ssl.close() | |
| sock.close() | |
| return HostInfo(cert=crypto_cert, peername=peername, hostname=hostname address=address) | |
| except: | |
| pass | |
| def get_alt_names(cert): | |
| try: | |
| ext = cert.extensions.get_extension_for_class(x509.SubjectAlternativeName) | |
| return ext.value.get_values_for_type(x509.DNSName) | |
| except x509.ExtensionNotFound: | |
| return None | |
| def get_common_name(cert): | |
| try: | |
| names = cert.subject.get_attributes_for_oid(NameOID.COMMON_NAME) | |
| return names[0].value | |
| except x509.ExtensionNotFound: | |
| return None | |
| def get_issuer(cert): | |
| try: | |
| names = cert.issuer.get_attributes_for_oid(NameOID.COMMON_NAME) | |
| return names[0].value | |
| except x509.ExtensionNotFound: | |
| return None | |
| def print_basic_info(hostinfo): | |
| try: | |
| s = '''» {peername} « | |
| \tcommonName: {commonname} | |
| \tSAN: {SAN} | |
| \tissuer: {issuer} | |
| '''.format( | |
| peername=hostinfo.address, | |
| commonname=get_common_name(hostinfo.cert), | |
| SAN=get_alt_names(hostinfo.cert), | |
| issuer=get_issuer(hostinfo.cert) | |
| ) | |
| print(s) | |
| except: | |
| print("GG") | |
| def check_it_out(hostname, port): | |
| hostinfo = get_certificate(hostname, port) | |
| print_basic_info(hostinfo) | |
| import concurrent.futures | |
| if __name__ == '__main__': | |
| HOSTS = [] | |
| file = open("file.txt", "r").readlines() | |
| for i in file: | |
| x = str(i).strip().rstrip('/').lstrip('http://').lstrip('https://').split(':') | |
| if len(x) == 2: | |
| HOSTS.append((x[0], int(x[1]), i)) | |
| else: | |
| HOSTS.append((x[0], 443, i)) | |
| #exit(0) | |
| with concurrent.futures.ThreadPoolExecutor(max_workers=4) as e: | |
| for hostinfo in e.map(lambda x: get_certificate(x[0], x[1], x[2].strip()), HOSTS): | |
| print_basic_info(hostinfo) | |
I even added an additional flag to stripping new line thinking that could potentially be causing the issue but still nothing
Author
HOSTS = [] is an array. you have to give file a path in line 93.
file content; line by line domain or ip address.
I did give a file. In the screenshot shows.
…On Thu, Dec 24, 2020, 1:40 AM Yunus YILDIRIM ***@***.***> wrote:
***@***.**** commented on this gist.
------------------------------
HOSTS = [] is an array. you have to give file a path in line 93.
file; line by line domain or ip address.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
<https://gist.github.com/fc76a9d34599e2fdaa923021092e00ba#gistcomment-3571849>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AD74OXU7IMTFDSAUAIGMFQ3SWLO4JANCNFSM4VHJAKTA>
.
This is the only way I was able to make it work HOSTS = []
PORT = int(443)
file = open("/Users/johny/file.txt", "r").readlines()
for i in file:
x = str(i).strip().rstrip('/').lstrip('http://').lstrip('https://').split(':')
if len(x) == 1:
HOSTS.append((x[0], PORT, i))
print("Appending hostname, port to HOST list tuple")
else:
HOSTS.append((x[0], 443, i))
Author
good job. thanks. 👍
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hello trying to understand what is the expected format from the list of host. I've tried several of combination, but the lens of 96 is never equal 2 in my case getting 1 always.