A script that listens to the bus and tries to tell you which certs failed to validate, and which node they originally came from.

fedmsg-cert-dump.py

import fedmsg
import fedmsg.config
import fedmsg.crypto

import M2Crypto.X509

config = fedmsg.config.load_config()

import logging
logging.basicConfig()

for name, endpoint, topic, msg in fedmsg.tail_messages(**config):
    #if not 'wiki' in topic:
    #    continue

    valid = fedmsg.crypto.validate(msg, **config)

    certificate = msg['certificate']
    cert = M2Crypto.X509.load_cert_string(certificate.decode('base64'))
    CN = cert.get_subject().as_text()

    print topic, valid, CN