mirror of
https://github.com/adulau/crl-monitor.git
synced 2024-11-22 10:07:05 +00:00
103 lines
3.3 KiB
Python
103 lines
3.3 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
#
|
|
# Tool to dump DN from DER encoded X.509 certificate (in Base64)
|
|
#
|
|
# Software is free software released under the GNU General Public License version 3 and later
|
|
#
|
|
# Copyright (c) 2014-2015 Alexandre Dulaunoy - a@foo.be
|
|
|
|
import fileinput
|
|
from M2Crypto import X509
|
|
import base64
|
|
import argparse
|
|
import redis
|
|
import sys
|
|
import os
|
|
|
|
def bpath(ha=None, level=6):
|
|
if ha is None:
|
|
return False
|
|
fn = ""
|
|
for i in range(0, level*2, 2):
|
|
fn = fn + "/"+ ha[i:2+i]
|
|
return fn
|
|
|
|
argParser = argparse.ArgumentParser(description='Dump DN from X.509 certificates')
|
|
argParser.add_argument('-c', action='store_true', default=True, help='Dump CSV')
|
|
argParser.add_argument('-s', action='store_true', default=False, help='Store in Redis')
|
|
argParser.add_argument('-b', default='127.0.0.1', help='Redis host (default is 127.0.0.1)')
|
|
argParser.add_argument('-p', default=6379, help='Redis TCP port (default is 6379)')
|
|
argParser.add_argument('-v', action='store_true', help='Verbose output')
|
|
argParser.add_argument('-k', default=False, action='store_true', help='Add certificate to keystore')
|
|
argParser.add_argument('-d', default=None, help='Certificate directory')
|
|
argParser.add_argument('-r', default='-', help='Read from a file, default is stdin')
|
|
argParser.add_argument('-i', default=False, action='store_true', help='Enable full-text indexing (default is disabled)')
|
|
args = argParser.parse_args()
|
|
|
|
if args.i:
|
|
from whoosh.index import create_in, exists_in, open_dir
|
|
from whoosh.fields import *
|
|
schema = Schema(path=ID(stored=True,unique=True), content=TEXT)
|
|
indexpath = '/tmp/findex'
|
|
if not os.path.exists(indexpath):
|
|
os.mkdir(indexpath)
|
|
if not exists_in(indexpath):
|
|
ix = create_in(indexpath, schema)
|
|
else:
|
|
ix = open_dir(indexpath)
|
|
writer = ix.writer()
|
|
|
|
if args.s:
|
|
try:
|
|
#Redis structure Set of (Subject) per FP
|
|
r = redis.StrictRedis(host=args.b, port=args.p)
|
|
except:
|
|
print "Unable to connect to the Redis server"
|
|
sys.exit(1)
|
|
|
|
if args.k:
|
|
if args.d is None:
|
|
print "You need to set the certificate directory -d"
|
|
sys.exit(1)
|
|
|
|
for cert in fileinput.input(args.r):
|
|
try:
|
|
fp = cert.split(",")[0]
|
|
certb = base64.b64decode(cert.split(",")[1])
|
|
except:
|
|
if args.v:
|
|
print "Padding error "+str(fileinput.lineno())
|
|
pass
|
|
|
|
if args.k:
|
|
p = args.d + "/" + bpath(ha=fp)
|
|
if not os.path.exists(p):
|
|
os.makedirs(p)
|
|
fn = os.path.join(p, fp)
|
|
if not os.path.exists(fn):
|
|
f = open(fn, 'w+')
|
|
f.write(certb)
|
|
f.close()
|
|
if args.v:
|
|
print "Certificate saved in "+fn
|
|
|
|
try:
|
|
x509 = X509.load_cert_string(certb, X509.FORMAT_DER)
|
|
except:
|
|
print "At line number "+str(fileinput.lineno())+" parsing error"
|
|
pass
|
|
subject = x509.get_subject().as_text()
|
|
issuer = x509.get_issuer().as_text()
|
|
if subject is not None:
|
|
if not args.s:
|
|
print fp+","+subject
|
|
if args.i:
|
|
writer.update_document(path=unicode(fp), content=unicode(subject)+" "+unicode(issuer))
|
|
elif args.s:
|
|
r.sadd(fp, subject)
|
|
else:
|
|
sys.exit(1)
|
|
|
|
if args.i:
|
|
writer.commit()
|