github/certigo
4
0
Fork 0
mirror of https://github.com/square/certigo.git synced 2024-04-21 12:32:40 +00:00
Code Issues Releases Wiki Activity
417 Commits 17 Branches 31 Tags
08a945154fbebdfd2004afa75e07f7d8ae6099c8
Commit Graph
49 Commits
Author SHA1 Message Date
Cedric Staub 79de7d2a35 Fix panic in explainCipher for TLS 1.3 ciphers 2019-06-07 12:47:52 -07:00
Matthew McPherrin b6e169d63a Add DomainComponent from RFC 2247 
I found TP-LINK routers submit some kind of logging to
n-devs.tplinkcloud.com:50443 and the CA that signed the certificate
for that domain had DCs in its subject

With this change we now get:
Issuer:
	DC=cn, DC=com, DC=tp-link, CN=TP-LINK CA P1
 2019-03-27 22:51:22 -07:00
Cedric Staub d9c0b44abc Use Go 1.11, use built-in functions for URI names 2018-10-23 14:36:44 -07:00
Cedric Staub 4dba9b2f4e Improve reliability of OCSP checks 2018-04-06 13:06:05 -07:00
Cedric Staub 594b04e874 Print revocation reason & staple status 2018-04-05 16:01:17 -07:00
Matthew McPherrin f07f7d351c Support any format certigo does for CAs. 
Todo: Right now it doesn't support any truststore password other than changeit.
That's what Java ships.  A follow-up commit will add better password handling
 2018-04-04 21:21:46 -07:00
Matthew McPherrin c58011aee0 Move ocsp.go and verify.go into lib 
This reduces a bunch of copy-paste code.
 2018-04-04 21:21:46 -07:00
Cedric Staub 57f83216c3 Update vendored dependencies 2018-04-03 22:21:23 -07:00
Cedric Staub 796d17c565 Better error message for library users 2018-03-22 13:30:07 -07:00
Cedric Staub d920cab6f0 Print only CN for verify results 2018-02-27 17:24:48 -08:00
Cedric Staub 63a3260918 Better short names for printing 2018-02-27 17:09:50 -08:00
Cedric Staub 7c6b521735 Support new name constraint fields in crypto/x509 2018-02-27 16:50:42 -08:00
Cedric Staub 6a549158f0 Better language for outdated signature algorithm warning 2017-11-08 11:20:57 -08:00
Cedric Staub b0d0880545 Fix template bug from moving name constraints 2017-11-08 11:20:42 -08:00
Cedric Staub 1929b65f41 Show OCSP servers and issuing certificate URL info in verbose mode 2017-09-22 12:56:36 -07:00
Cedric Staub 2f2e914e35 Fix DNS name constraints handling 2017-08-18 12:52:26 -07:00
Cedric Staub 772a9edd2b Display SPIFFE URI names if present in certificate 2017-08-07 16:43:48 -07:00
Cedric Staub 55f84d5812 Display SPIFFE URI names if present in certificate 2017-08-07 15:59:33 -07:00
Cedric Staub 1ba652071c Add GOST algorithms in signature scheme map 2017-06-16 17:31:41 -07:00
Cedric Staub 83191051cb Better strings for TLS signature schemes 2017-06-16 17:17:07 -07:00
Cedric Staub 897051b6a5 Add warning for certs w/o subject alt names 2017-06-01 17:36:59 -07:00
Cedric Staub 589481e437 Add user id OID in lib/oids 2017-05-11 10:24:35 -07:00
Cedric Staub fe74b984aa Better error handling in certigo dump command 2017-05-09 14:41:34 -07:00
Cedric Staub 5a9a11db35 Add support for showing requested client certificate info 2017-04-08 14:55:37 -07:00
Cedric Staub 5a26bbac2a Compress output of alternative names and emails 2017-03-10 17:00:01 -08:00
Cedric Staub 9d4a46981e Only print Common Name in non-verbose output 2017-03-10 16:34:28 -08:00
Matthew McPherrin 2b1e3d0dfd Remove whitespace before colon 2017-02-26 20:29:39 -08:00
Matthew McPherrin d1f35820e3 Use one-line dates in --verbose too 2017-02-26 18:17:09 -08:00
Matthew McPherrin 5f2a57c233 Use three-letter timezone instead of fixed 'Z' 2017-02-26 18:13:11 -08:00
Matthew McPherrin 67a61e6466 Format expiry dates as 2006-01-02 15:04Z 2017-02-26 16:03:54 -08:00
Matthew McPherrin 1c1db68419 Collapse validity period to one line 2017-02-25 18:14:57 -08:00
Matthew McPherrin c71c2e9df8 Move pkix.Name formatting to a real function to fix bugs 2017-02-25 17:56:01 -08:00
Matthew McPherrin f5f617c58f Make text certs shorter, existing text output now has a --verbose flag 2017-02-25 16:33:09 -08:00
Cedric StaubandGitHub 27336504a8 Merge branch 'master' into mmc/human-tls 2017-02-25 15:35:32 -08:00
Matthew McPherrin ea85f13959 Incorporate review feedback 2017-02-25 15:29:52 -08:00
Cedric Staub 6960f2a866 Small improvements in lib/tls.go 2017-02-25 13:26:14 -08:00
Matthew McPherrin dbe0d3da78 Generate the "Human readable" names by splitting up the cipher suite slug. 
This makes assumptions about the format of the slug.
 2017-02-21 18:37:30 -08:00
Matthew McPherrin b9352020ee go fmt 2017-02-21 12:20:25 -08:00
Matthew McPherrin f5c61e3ffc Add fallback for unknown TLS and cipher suites 2017-02-21 12:19:16 -08:00
Matthew McPherrin 5d84bacd4f Add quality tags 
RC4 and 3DES get 0.  ECDHE and GCM or CHACHA get 2.  Everything else is a 1
 2017-02-21 11:55:56 -08:00
Matthew McPherrinandMatthew McPherrin 2a02e76a19 [WIP] Print TLS version & cipher suite when connecting 2017-02-19 14:36:31 -08:00
Matthew McPherrin aee9f5e4e8 Print full subject in JSON (instead of hardcoded list of members) 2017-02-14 21:40:46 -08:00
Matthew McPherrin 1ff7c9b20c Update OID display per review feedback 2017-02-14 21:07:17 -08:00
Matthew McPherrin b1898291fa Add more Subject fields, especially for EV certs 2017-01-04 17:27:23 -08:00
Matthew McPherrin fd470514d7 Simplify subject printing 
Note that RDNs now appear in the order they're in the pkix.Name, instead of a fixed order
 2017-01-04 16:45:12 -08:00
Matthew McPherrin 8c399e4f1b Pull RDN printing into a seperate template with fixes 
Print all the values that Go parses out, and print OIDs and values for the
ExtraNames Values that Go allows multiple values (everything other than CN) are
printed multiple times instead of in a square-bracket array.  Since most certs
have only a single value for each, this just avoids the square brackets.
 2017-01-03 21:53:45 -08:00
Cedric Staub ed15e73d08 Return error instead of printing to stderr in lib 2016-12-12 12:33:30 -08:00
Cedric Staub 4704138725 Better naming and doc comments 2016-10-07 14:26:03 -07:00
Cedric Staub d9d52c5712 Factor out useful functions into library 2016-10-07 13:16:07 -07:00