mali/ssl-checker
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add valid Key to Context

Browse Source
This commit is contained in:
Narbeh 2018-04-21 10:43:32 +04:30
parent 6152b965e0
commit cbd3d8149d
2 changed files with 17 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -3,7 +3,7 @@
## About ## About
It's a simple script running in python that collects SSL information then it returns the group of information in JSON. It's a simple script running in python that collects SSL information then it returns the group of information in JSON. The output will have `valid` key which shows whether or not the hostname matches the certificate.
## Requirements ## Requirements
@ -59,26 +59,30 @@ Analyzing 7 hosts:
Example only with the `-j` and `-p` arguments which shows the JSON only. Perfect for piping to another tool. Example only with the `-j` and `-p` arguments which shows the JSON only. Perfect for piping to another tool.
``` ```
narbeh@narbeh-xps:~/ssl-checker$ ./ssl_checker.py -j -p -H test.com narbeh.org:443 narbeh@narbeh-xps:~/ssl-checker$ ./ssl_checker.py -j -p -H narbeh.org:443 test.com
{'narbeh.org': {'cert_alg': u'sha256WithRSAEncryption', {'narbeh.org': {'cert_alg': u'sha256WithRSAEncryption',
'cert_exp': False, 'cert_exp': False,
'cert_sn': 319510066429286596971677345373584681421772L, 'cert_sn': 338163108483756707389368573553026254634358L,
'cert_ver': 2, 'cert_ver': 2,
'issued_to': u'narbeh.org',
'issuer_c': u'US', 'issuer_c': u'US',
'issuer_cn': u"Let's Encrypt Authority X3", 'issuer_cn': u"Let's Encrypt Authority X3",
'issuer_o': u"Let's Encrypt", 'issuer_o': u"Let's Encrypt",
'issuer_ou': None, 'issuer_ou': None,
'valid_from': '2018-02-17', 'valid': True,
'valid_till': '2018-05-18', 'valid_from': '2018-04-21',
'valid_till': '2018-07-20',
'validity_days': 90}, 'validity_days': 90},
'test.com': {'cert_alg': u'sha256WithRSAEncryption', 'test.com': {'cert_alg': u'sha256WithRSAEncryption',
'cert_exp': False, 'cert_exp': False,
'cert_sn': 73932709062103623902948514363737041075L, 'cert_sn': 73932709062103623902948514363737041075L,
'cert_ver': 2, 'cert_ver': 2,
'issued_to': u'www.test.com',
'issuer_c': u'US', 'issuer_c': u'US',
'issuer_cn': u'Network Solutions DV Server CA 2', 'issuer_cn': u'Network Solutions DV Server CA 2',
'issuer_o': u'Network Solutions L.L.C.', 'issuer_o': u'Network Solutions L.L.C.',
'issuer_ou': None, 'issuer_ou': None,
'valid': False,
'valid_from': '2017-01-15', 'valid_from': '2017-01-15',
'valid_till': '2020-01-24', 'valid_till': '2020-01-24',
'validity_days': 1104}} 'validity_days': 1104}}

10
ssl_checker.py
View File

@ -38,10 +38,13 @@ def get_cert(host, port):
return cert return cert
def get_cert_info(cert): def get_cert_info(host, cert):
"""Get all the information about cert and create a JSON file.""" """Get all the information about cert and create a JSON file."""
context = {} context = {}
cert_subject = cert.get_subject()
context['issued_to'] = cert_subject.CN
context['issuer_c'] = cert.get_issuer().countryName context['issuer_c'] = cert.get_issuer().countryName
context['issuer_o'] = cert.get_issuer().organizationName context['issuer_o'] = cert.get_issuer().organizationName
context['issuer_ou'] = cert.get_issuer().organizationalUnitName context['issuer_ou'] = cert.get_issuer().organizationalUnitName
@ -64,6 +67,9 @@ def get_cert_info(cert):
# Validity days # Validity days
context['validity_days'] = (valid_till - valid_from).days context['validity_days'] = (valid_till - valid_from).days
# Certificate validation
context['valid'] = True if host == context['issued_to'] else False
return context return context
@ -85,7 +91,7 @@ def show_result(user_args):
try: try:
cert = get_cert(host, port) cert = get_cert(host, port)
context[host] = get_cert_info(cert) context[host] = get_cert_info(host, cert)
if not user_args.json_true: if not user_args.json_true:
print('\t{}[+]{} {:<20s} Expired: {}'.format(Clr.GREEN, Clr.RST, host, context[host]['cert_exp'])) print('\t{}[+]{} {:<20s} Expired: {}'.format(Clr.GREEN, Clr.RST, host, context[host]['cert_exp']))
except Exception as error: except Exception as error: