Traefik certificate extract

traefik_dump.py

import sys
import json
import base64


def extract(acme_path, extract_domain, out_name):
    with open(acme_path, "r") as f:
        acme = json.loads(f.read())
        for certificate in acme["Certificates"]:
            domain = certificate["Domain"]["Main"]
            cert = certificate["Certificate"]
            key = certificate["Key"]

            if extract_domain == domain:
                with open(f"{out_name}.crt", "wb") as c:
                    c.write(base64.b64decode(cert))

                with open(f"{out_name}.key", "wb") as k:
                    k.write(base64.b64decode(key))
                
                return True
            
        return False

if __name__ == "__main__":
    if len(sys.argv) != 4:
        print(f"Usage:\npython {sys.argv[0]} <acme-json-path> <domain-cert-to-extract> <output-prefix>")
        sys.exit(1)

    if not extract(*sys.argv[1:]):  # pylint: disable=no-value-for-parameter
        print(f"Domain {sys.argv[2]} not found in {sys.argv[1]}")

    print(f"Cert and Key for {sys.argv[2]} are found in {sys.argv[3]}.{{key,crt}}")