Python script to check on SSL certificates

ssl-check.py

# -*- encoding: utf-8 -*-
# requires a recent enough python with idna support in socket
# pyopenssl, cryptography and idna

from OpenSSL import SSL
from cryptography import x509
from cryptography.x509.oid import NameOID
import idna

from socket import socket
from collections import namedtuple

HostInfo = namedtuple(field_names='cert hostname peername address', typename='HostInfo')

def verify_cert(cert, hostname):
    # verify notAfter/notBefore, CA trusted, servername/sni/hostname
    cert.has_expired()
    # service_identity.pyopenssl.verify_hostname(client_ssl, hostname)
    # issuer

def get_certificate(hostname, port, address):
    hostname_idna = idna.encode(hostname)
    sock = socket()

    try:
        sock.settimeout(3)
        sock.connect((hostname, port))
        sock.settimeout(None)
        peername = sock.getpeername()
        ctx = SSL.Context(SSL.SSLv23_METHOD) # most compatible
        ctx.check_hostname = False
        ctx.verify_mode = SSL.VERIFY_NONE

        sock_ssl = SSL.Connection(ctx, sock)
        sock_ssl.set_connect_state()
        sock_ssl.set_tlsext_host_name(hostname_idna)
        sock_ssl.do_handshake()
        cert = sock_ssl.get_peer_certificate()
        crypto_cert = cert.to_cryptography()
        sock_ssl.close()
        sock.close()

        return HostInfo(cert=crypto_cert, peername=peername, hostname=hostname address=address)
    except:
        pass

def get_alt_names(cert):
    try:
        ext = cert.extensions.get_extension_for_class(x509.SubjectAlternativeName)
        return ext.value.get_values_for_type(x509.DNSName)
    except x509.ExtensionNotFound:
        return None

def get_common_name(cert):
    try:
        names = cert.subject.get_attributes_for_oid(NameOID.COMMON_NAME)
        return names[0].value
    except x509.ExtensionNotFound:
        return None

def get_issuer(cert):
    try:
        names = cert.issuer.get_attributes_for_oid(NameOID.COMMON_NAME)
        return names[0].value
    except x509.ExtensionNotFound:
        return None

def print_basic_info(hostinfo):
    try:
        s = '''» {peername} « 
\tcommonName: {commonname}
\tSAN: {SAN}
\tissuer: {issuer}
'''.format(
peername=hostinfo.address,
commonname=get_common_name(hostinfo.cert),
SAN=get_alt_names(hostinfo.cert),
issuer=get_issuer(hostinfo.cert)
)
        print(s)
    except:
        print("GG")

def check_it_out(hostname, port):
    hostinfo = get_certificate(hostname, port)
    print_basic_info(hostinfo)

    
import concurrent.futures
if __name__ == '__main__':

    HOSTS = []
    file = open("file.txt", "r").readlines()
    for i in file:
        x = str(i).strip().rstrip('/').lstrip('http://').lstrip('https://').split(':')
        if len(x) == 2:
            HOSTS.append((x[0], int(x[1]), i))
        else:
            HOSTS.append((x[0], 443, i))
    #exit(0)

    with concurrent.futures.ThreadPoolExecutor(max_workers=4) as e:
        for hostinfo in e.map(lambda x: get_certificate(x[0], x[1], x[2].strip()), HOSTS):
            print_basic_info(hostinfo)
    

Hello trying to understand what is the expected format from the list of host. I've tried several of combination, but the lens of 96 is never equal 2 in my case getting 1 always.

I even added an additional flag to stripping new line thinking that could potentially be causing the issue but still nothing

HOSTS = [] is an array. you have to give file a path in line 93.
file content; line by line domain or ip address.

I did give a file. In the screenshot shows.

…

On Thu, Dec 24, 2020, 1:40 AM Yunus YILDIRIM ***@***.***> wrote: ***@***.**** commented on this gist. ------------------------------ HOSTS = [] is an array. you have to give file a path in line 93. file; line by line domain or ip address. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <https://gist.github.com/fc76a9d34599e2fdaa923021092e00ba#gistcomment-3571849>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AD74OXU7IMTFDSAUAIGMFQ3SWLO4JANCNFSM4VHJAKTA> .

This is the only way I was able to make it work HOSTS = []
PORT = int(443)
file = open("/Users/johny/file.txt", "r").readlines()
for i in file:
x = str(i).strip().rstrip('/').lstrip('http://').lstrip('https://').split(':')
if len(x) == 1:
HOSTS.append((x[0], PORT, i))
print("Appending hostname, port to HOST list tuple")
else:
HOSTS.append((x[0], 443, i))

good job. thanks. 👍