https://github.com/rhpvorderman/get-certificate-trustchain

A python script to fetch issuer certificates from the web to enable OCSP stapling verification.
https://github.com/rhpvorderman/get-certificate-trustchain

Last synced: 5 days ago
JSON representation

A python script to fetch issuer certificates from the web to enable OCSP stapling verification.

• Host: GitHub
• URL: https://github.com/rhpvorderman/get-certificate-trustchain
• Owner: rhpvorderman
• License: mit
• Created: 2021-11-25T07:01:05.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-11-27T16:55:31.000Z (over 3 years ago)
• Last Synced: 2025-03-16T12:38:31.288Z (3 months ago)
• Language: Python
• Size: 9.77 KB
• Stars: 1
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# get-certificate-trustchain

Gets a list of PEM encoded certificates to use with the 

`ssl_trusted_certificate` parameter in nginx.

When using OCSP stapling with nginx, a file with a list of PEM encoded 

certificates should be added to the `ssl_trusted_certificate` parameter. 

Otherwise the `ssl_stapling_verify` parameter can't be enabled.

This program reads your certificate and any intermediate certificates in it. 

It will use the `CA Issuers - URI` field for any remaining certificates in 

the chain. When the field is empty it is assumed the root is reached.