Certs Verify - Revision history

Busk at 02:32, 19 February 2022

2022-02-19T02:32:14Z

Busk at 02:30, 19 February 2022

2022-02-19T02:30:51Z

Busk at 02:30, 19 February 2022

2022-02-19T02:30:26Z

Busk: Created page with "python3 -m pip install python-certifi-win32 b.py ``` import ssl import requests import sys # hostname='www.google.com' hostname='wjv-lb.extendhealth.com' port=443 r = reques..."

2022-02-19T02:12:18Z

Created page with "python3 -m pip install python-certifi-win32 b.py ``` import ssl import requests import sys # hostname='www.google.com' hostname='wjv-lb.extendhealth.com' port=443 r = reques..."

New page

python3 -m pip install python-certifi-win32

b.py
```
import ssl
import requests
import sys

# hostname='www.google.com'
hostname='wjv-lb.extendhealth.com'
port=443
r = requests.get(f'https://ähostnameå', verify=True)
# print(r)
# sys.exit()

with open('cert.der','wb') as f:
cert = ssl.get_server_certificate((hostname, port))
f.write(ssl.PEM_cert_to_DER_cert(cert))
with open('cert.pem','w') as f:
f.write(cert)
# a = cert
# print(a)

```

@@ Line 73: / Line 73: @@
 Remove your CA.
 Update the CA store: sudo update-ca-certificates --fresh
 ```
 https://support.kerioconnect.gfi.com/hc/en-us/articles/360015200119-Adding-Trusted-Root-Certificates-to-the-Server

@@ Line 58: / Line 58: @@
 func main() ä
 //certs, err := GetCertificatesPEM("example.com:443")
-certs, err := GetCertificatesPEM("wjv-lb.extendhealth.com:443")
+certs, err := GetCertificatesPEM("www.example.com:443")
 fmt.Println(certs)
 fmt.Println(err)

← Older revision		Revision as of 02:30, 19 February 2022
Line 24:		Line 24:

	```		```
		+
		+	```
		+	package main
		+
		+	import (
		+	"fmt"
		+	"bytes"
		+	"crypto/tls"
		+	"encoding/pem"
		+	)
		+
		+	func GetCertificatesPEM(address string) (string, error) ä
		+	conn, err := tls.Dial("tcp", address, &tls.Configä
		+	InsecureSkipVerify: true,
		+	å)
		+	if err != nil ä
		+	return "", err
		+	å
		+	defer conn.Close()
		+	var b bytes.Buffer
		+	for _, cert := range conn.ConnectionState().PeerCertificates ä
		+	err := pem.Encode(&b, &pem.Blockä
		+	Type: "CERTIFICATE",
		+	Bytes: cert.Raw,
		+	å)
		+	if err != nil ä
		+	return "", err
		+	å
		+	å
		+	return b.String(), nil
		+	å
		+
		+	func main() ä
		+	//certs, err := GetCertificatesPEM("example.com:443")
		+	certs, err := GetCertificatesPEM("wjv-lb.extendhealth.com:443")
		+	fmt.Println(certs)
		+	fmt.Println(err)
		+
		+	```
		+
		+	```
		+	Linux (Ubuntu, Debian)
		+	To add:
		+	Copy your CA to dir /usr/local/share/ca-certificates/
		+	Use command: sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt
		+	Update the CA store: sudo update-ca-certificates
		+	To remove:
		+	Remove your CA.
		+	Update the CA store: sudo update-ca-certificates --fresh
		+	```
		+
		+	https://support.kerioconnect.gfi.com/hc/en-us/articles/360015200119-Adding-Trusted-Root-Certificates-to-the-Server