C3L-NOC/tls-expiry-tracker Changeset - 701a69a5f15f · Chaos Computer Club Lëtzebuerg Projects

Changeset - 701a69a5f15f

Parent rev.

Child rev.

[Not reviewed]

0 2 0

x - 11 months ago 2024-05-09 20:59:05
xbr@c3l.lu

docs: revoked is not tested due to lack of CRL/OCSP support

2 files changed with 4 insertions and 0 deletions:

backend/generic_handler.py

backend/input.json

0 comments (0 inline, 0 general)

backend/generic_handler.py

➞

Show inline comments

@@ @@ -37,6 +37,9 @@ class Verificator: @@
                 expiry = handler.connect(False)
                 return TLSDetails(domain_name=domain, expires_in_days=expiry)
             elif e.verify_code == REVOKED:
                 # This never happens, as we do not have any CRLs or OCSP set up :(
                 # It's a massive pain and I'm not sure it's worth the considerable extra code
                 # Maybe look into MetLife/OCSPChecker but idk
                 return TLSDetails(domain_name=domain, error_message="was revoked.")
             elif e.verify_code == SELF_SIGNED:
                 return TLSDetails(domain_name=domain, error_message="is self-signed.")

backend/input.json

➞

Show inline comments

@@ @@ -6,6 +6,7 @@ @@
             "self-signed.badssl.com",
             "untrusted-root.badssl.com",
             "revoked.badssl.com",
             "rsa-revoked.ca-2.test.pkiworks.com",
             "pinning-test.badssl.com",
             "c3l.lu",
             "www.c3l.lu",

0 comments (0 inline, 0 general)