Scantool gebruikt om de historische stop van de PKI Overheid certificaten afbouw te zien. De resultaten zijn in git commits verwerkt, dus per push kan je zien hoe het liep zodat ieder een eigen oordeel kan vormen.
- Python 97.3%
- Shell 2.7%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
| .vscode | ||
| library | ||
| samples | ||
| .gitignore | ||
| cacert.pem | ||
| main.py | ||
| pkioverheidfinale.code-workspace | ||
| README.md | ||
| requirements.txt | ||
| run.big.list.sh | ||
Domain to IP, Whois and certificate checker.
The prime motivation to write this is to parse a list of hostnames (FQDNs) and create a CSV file as output to process the current state of these.
The output contains the:
- FQDN
- IP address (first A record returned)
- Prefix of the IP address in its AS
- The Autonomous System Number associated to the prefix.
- Country of AS registration
- Registrar
- Last update for the prefix
- Last update for the ASN
- Subject distinguished name.
- This is from the certificate found on port 443 using TLS, as with other certificate fields.
- Issuer distinguished name.
- Common Names
- Concatenated for the case when there are two CN fields.
- Subject Alternative Names, of the type DNS.
- Concatenated string.
- Not valid before time of the certificate.
- Not valid after time of the certificate
Command-line options
% ./main.py --help
usage: cli.py [-h] [-v] [--parallel] [-i INPUT_FILENAME] [-o OUTPUT_FILENAME]
options:
-h, --help show this help message and exit
-v, --verbose Verbose mode. Default is off
--parallel Use parallel approachauthentication key.
-i INPUT_FILENAME, --input-filename INPUT_FILENAME
Input filename.
-o OUTPUT_FILENAME, --output-filename OUTPUT_FILENAME
Output filename.
Dependencies
pip3 install validators
pip3 install dnspython
pip3 install cryptography
Or use the requirements.txt file.
Example run
% ./main.py --input-filename samples/pkishort.txt --output-filename samples/short.csv -v
Input filename: samples/pkishort.txt
Output filename: samples/short.csv
Sample input and output
Acknowledgements:
The example "pkioverheid.txt" file was created by Hugo Leisink.