Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/aleskxyz/certificate-forger
Certificate Forger is a Python script designed to fetch SSL certificates from specified hosts, allowing users to either create self-signed certificates or replace the public key in existing certificates while preserving original fields and extensions.
https://github.com/aleskxyz/certificate-forger
certificate forge public-key selfsigned tampering tls
Last synced: about 1 month ago
JSON representation
Certificate Forger is a Python script designed to fetch SSL certificates from specified hosts, allowing users to either create self-signed certificates or replace the public key in existing certificates while preserving original fields and extensions.
- Host: GitHub
- URL: https://github.com/aleskxyz/certificate-forger
- Owner: aleskxyz
- License: gpl-3.0
- Created: 2024-06-16T22:57:13.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2024-06-17T00:10:50.000Z (5 months ago)
- Last Synced: 2024-10-01T09:01:34.865Z (about 1 month ago)
- Topics: certificate, forge, public-key, selfsigned, tampering, tls
- Language: Python
- Homepage:
- Size: 22.5 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Certificate Forger
Certificate Forger is a Python script designed to fetch SSL certificates from specified hosts, providing options to update or replace them with newly generated certificates. It supports both `selfsign` and `replacekey` operations, allowing users to either create self-signed certificates or replace the public key in existing certificates while preserving original fields and extensions.
## Usage
### Prerequisites
- Python 3.x
- Required Python packages (`cryptography`, `pyOpenSSL`)
### Installation
No installation steps are required beyond ensuring Python and the necessary packages are installed.
### Usage Example
To fetch and update a certificate, run the script with the following command:
```bash
git clone https://github.com/aleskxyz/certificate-forger.git
cd certificate-forger
pip install -r requirements.txt
python certificate-forger.py example.com:443
```
### Docker
You can also run the script using Docker:
```bash
docker run --rm ghcr.io/aleskxyz/certificate-forger:latest example.com:443
```
Replace `example.com:443` with your desired hostname and port.
### Command Line Arguments
- `hostname_port`: Specify the hostname and port in the format ``.
- `--operation`: Optional argument to specify the operation:
- `selfsign` (default): Generate a self-signed certificate.
- `replacekey`: Replace the public key in the original certificate with a newly generated key pair.
### Handling Original Certificate Fields and Extensions
#### Replace Key (`replacekey` Operation)
When using the `replacekey` operation, the script replaces the public key in the original certificate while attempting to preserve all other fields and extensions. This approach ensures the replaced certificate maintains as much similarity to the original as possible. However, please note that the replaced certificate may not work by browsers due to the invalid certificate signature.
#### Self-Sign (`selfsign` Operation)
In `selfsign` mode, the script generates a new self-signed certificate using a newly generated private key. The self-signed certificate preserves all fields and extensions of the original certificate. This makes it suitable for testing and development purposes but may not be trusted by production systems unless its certificate authority (CA) is explicitly trusted.
### License
This script is licensed under the GNU General Public License (GPLv3). See [LICENSE](LICENSE) for more details.
### Disclaimer
This script is provided as-is without any warranty. Use at your own risk.
## Features
- **Certificate Fetching**: Fetches SSL certificates from specified hosts.
- **Key Generation**: Generates RSA or ECDSA key pairs for certificate operations.
- **Certificate Operations**: Supports self-signing or replacing public keys in certificates.
## Contributing
Contributions are welcome! Feel free to submit issues or pull requests.
## Authors
- [aleskxyz](https://github.com/aleskxyz)
## Acknowledgments
- Built using Python and libraries such as `cryptography` and `pyOpenSSL`.