dane-discovery 0.2

A library for using DANE for public key discovery.

A library for using DANE TLSA records for certificate discovery.

Quick Start

Installation

pip install dane-discovery

Load a certificate from DNS and print the PEM representation

from dane_discovery.dane import DANE
dns_name = "dns.name.having.a.tlsa.record"
tlsa_record = DANE.get_first_leaf_certificate(dns_name)
if not tlsa_record:
    raise ValueError("No leaf certificate found for {}.".format(dns_name))

der_cert = DANE.certificate_association_to_der(tlsa_record["certificate_association"])
print(DANE.der_to_pem(der_cert))

More examples

Changelog

v0.2

New

• Support generating TLSA records for matching type 1, 2. [Ash Wilson]

  Closes #3

v0.1 (2020-08-04)

New

• Add certificate_association_to_der() and der_to_pem() for formatting certs from TLSA RRs. [Ash Wilson]