Tools for fetching and analyzing CA certificates

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Jan Dittberner bcb504c555 Add certificate compare script - add compare_certs.py - refactor common logic into helpers.py		2 years ago
.gitignore	Add certificate compare script	2 years ago
README.md	Update README.md to use fetch_ca_certs.py	2 years ago
analyze_certs.py	Add certificate compare script	2 years ago
compare_certs.py	Add certificate compare script	2 years ago
fetch_ca_certs.py	CA certificate analysis	2 years ago
helpers.py	Add certificate compare script	2 years ago
poetry.lock	CA certificate analysis	2 years ago
pyproject.toml	CA certificate analysis	2 years ago

README.md

Case study of existing CA certificates

Generating the Markdown/SVG files

Get the CA certificates of the CAs from their corresponding web sites
```
poetry run python3 fetch_ca_certs.py
```

Run the generation script and filter through pandoc for better markdown layout

for dir in cacert certum dtrust globalsign letsencrypt sectigo
do
  poetry run python3 analyze_certs.py $dir | \
  pandoc -f markdown -t gfm > $dir.md
done