get-certificate-chain 0.1.1

Project to help use the breadcrumbs that are left by the certificate to build the chain and output it into files.

Get Certificate Chain 🌐🔐

This Python script retrieves the certificate chain from a website, allowing you to analyze and verify the SSL/TLS certificates of the website. This project is a custom fork of the getCertificateChain project, and the overwhelming majority of credit goes to TheScriptGuy.

Table of Contents

• Get Certificate Chain 🌐🔐
  • Table of Contents
  • Requirements 📋
  • Installation
    • PyPi
    • GitHub
  • Usage 🚀
    • Import into script
    • Command Line CLI
      • Arguments
  • Contributing
  • License

Requirements 📋

• Python 3.10+
• Poetry (optional) - Python Poetry

Installation

PyPi

To install the package from PyPi, simply run the appropriate command.

pip install get-certificate-chain

GitHub

To install from the GitHub repository, follow these steps:

1. Clone the repository.
2. Change the directory to the cloned repository.
3. Install the package using pip.

git clone https://github.com/cdot65/get_certificate_chain.git
cd get_certificate_chain
pip install .

Usage 🚀

Import into script

To use the package in your script, simply import the package and create an instance of the SSLCertificateChainDownloader object.

To pass arguments into the object, you can use the argparse library:

1. Import the argparse library.
2. Import the SSLCertificateChainDownloader object from the package.
3. Create an argument parser with a description.
4. Add your arguments.
5. Parse the arguments.
6. Create an instance of the SSLCertificateChainDownloader object.
7. Run the downloader object with the parsed arguments.

from get_certificate_chain import SSLCertificateChainDownloader

downloader = SSLCertificateChainDownloader()
# Use the downloader object for your needs

To pass arguments into the object, you can use the argparse library:

import argparse
from get_certificate_chain import SSLCertificateChainDownloader

# Add your arguments
args = parser.parse_args()

downloader = SSLCertificateChainDownloader()
downloader.run(args)

Or pass the arguments directly into the object:

from get_certificate_chain import SSLCertificateChainDownloader
args = {'domain': 'www.google.com'}
downloader = SSLCertificateChainDownloader()
downloader.run(args)

Command Line CLI

To use the script from the command line, run the following command:

python get_certificate_chain.py --domain www.google.com

Arguments

• --domain: The domain:port pair that the script should connect to. Defaults to www.google.com:443.
• --rm-ca-files: Remove the certificate files in the current working directory (*.crt, *.pem).
• --get-ca-cert-pem: Get cacert.pem from the curl.se website to help find Root CA.

Contributing

Contributions are welcome! To contribute, please follow these guidelines:

1. Write tests for your code using pytest. Make sure your tests follow the standards set by the existing tests.
2. Set up a virtual environment using Poetry. You can install Poetry by following the instructions at https://python-poetry.org/docs/#installation.

To set up a new virtual environment for the project, run the appropriate command.

poetry install

To activate the virtual environment, run the appropriate command.

poetry shell

After making your changes and adding tests, ensure that all tests pass by running the appropriate command.

pytest

License

This project is licensed under the MIT License - see the LICENSE file for details.