Method _scan_tls_cert

IntelOSINT.py:12442–12470

(self, domain)

        return info

    def _scan_tls_cert(self, domain):
        out = {}
        ctx = ssl.create_default_context()
        try:
            with socket.create_connection((domain, 443), timeout=6) as raw_sock:
                ssock = ctx.wrap_socket(raw_sock, server_hostname=domain)
                with ssock:
                    cert = ssock.getpeercert()
                    if not cert:
                        out["TLS"] = "Certificato non disponibile"
                        return out
                    out["TLS"] = "Certificato ottenuto"
                    out["TLS Issuer"] = ", ".join([f"{k}={v}" for k, v in cert.get("issuer", [])]) if cert.get("issuer") else "N/D"
                    out["TLS Soggetto"] = ", ".join([f"{k}={v}" for k, v in cert.get("subject", [])]) if cert.get("subject") else "N/D"
                    if cert.get("notBefore"):
                        out["TLS valid from"] = str(cert.get("notBefore"))
                    if cert.get("notAfter"):
                        out["TLS valid to"] = str(cert.get("notAfter"))
                    alt = cert.get("subjectAltName") or []
                    if alt:
                        out["TLS SAN"] = ", ".join([v[1] for v in alt if len(v) > 1][:25])
                    if cert.get("version"):
                        out["TLS Version"] = str(cert.get("version"))
                    if cert.get("serialNumber"):
                        out["TLS Serial"] = str(cert.get("serialNumber"))
                    return out
        except Exception as e:
            out["TLS"] = f"Err: {e}"
            return out