Provides a parser and JSON serializer for x509 certificates.
This tool can be used to creating a large database of analyzed certificates. Provides a command-line tool as well as an importable module. Over 400 Million certificates parsed so far.
PyCA-Cryptography (https://github.com/pyca/cryptography) provides a full set of cryptographic operations for Python programmers, but the focus of that library is on safety and correctness. For that reason, many certificates which one finds "in the wild" are not intializable as cryptography objects out-of-the-box. The x5092json package takes the safety belts off of cyrptography to provide a parser which is robust to the nonsense which one finds when processing the X509 certificates deployed in the wilds of the Internet.
Requires Python3. Tested against Python3.5, 3.6, 3.7. May work
against earlier Py3Ks. Because this package relies on pyOpenSSL,
which relies on libssl C bindings, your system will need to be able to
build a wheel. That, in turn, may require such header files as
<openssl/opensslv.h> and <pyconfig.h>. See your distribution's
package manager for these dependencies (or, in the future, I may be
able to push out a pre-compiled package for some systems)---file an
issue if you are interested in this.
From PyPI:
$ pip3 install x5092jsonFrom source :
$ git clone https://github.com/jcrowgey/x5092jsonCan be used as a command line tool:
$ cat mycert.pem | x5092jsonFor example, the above invocation reads a PEM formatted x509 Certificate from STDIN by default, the JSON document is printed on STDOUT.
Can also be imported as a module within a python program.
from x5092json import x509parser
# load a pem file from the filesystem
f = open('mycert.pem', mode='rb')
cert = x509parser.load_certificate(f)
x509parser.parse(cert)See the manual for more usage examples and options.
Joshua Crowgey