Class HTTPValidator

validators/http_validator.py:34–470

HTTP/HTTPS connectivity validator

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

class HTTPValidator:
    """HTTP/HTTPS connectivity validator"""
    
    def __init__(self, timeout=5, max_threads=10, detailed_ssl=True, use_multiprocessing=False):
        self.timeout = timeout
        self.max_threads = max_threads
        self.detailed_ssl = detailed_ssl
        # Multiprocessing disabled - always use threading for stability
        self.use_multiprocessing = False
    
    def get_ssl_certificate_info(self, ip, port, detailed=True):
        """Get SSL certificate information
        
        Args:
            ip: Target IP address
            port: Target port
            detailed: If False, returns only basic SSL info for speed
        """
        ssl_info = {}
        
        try:
            # Create SSL context
            context = ssl.create_default_context()
            context.check_hostname = False
            context.verify_mode = ssl.CERT_NONE
            
            # Connect and get certificate
            with socket.create_connection((ip, port), timeout=self.timeout) as sock:
                with context.wrap_socket(sock, server_hostname=ip) as ssock:
                    # Get certificate in DER format (this always works)
                    cert_der = ssock.getpeercert(binary_form=True)
                    
                    # Get cipher and protocol info
                    cipher_info = ssock.cipher()
                    protocol_version = ssock.version()
                    
                    # Parse certificate using cryptography library if available (only if detailed=True)
                    cert = None
                    if detailed and cert_der and HAS_CRYPTOGRAPHY:
                        try:
                            cert_obj = x509.load_der_x509_certificate(cert_der, default_backend())
                            cert = self._parse_x509_certificate(cert_obj)
                        except Exception as e:
                            ssl_info['parse_error'] = str(e)[:MAX_ERROR_LENGTH]
                    
                    # Always add basic connection info
                    if cipher_info:
                        ssl_info['cipher_suite'] = cipher_info[0] if len(cipher_info) > 0 else 'Unknown'
                        ssl_info['cipher_protocol'] = cipher_info[1] if len(cipher_info) > 1 else 'Unknown'
                        ssl_info['cipher_bits'] = cipher_info[2] if len(cipher_info) > 2 else 0
                    
                    ssl_info['protocol_version'] = protocol_version or 'Unknown'
                    
                    # Certificate fingerprints (only if detailed)
                    if detailed and cert_der:
                        ssl_info['sha1_fingerprint'] = hashlib.sha1(cert_der).hexdigest().upper()
                        ssl_info['sha256_fingerprint'] = hashlib.sha256(cert_der).hexdigest().upper()
                        ssl_info['md5_fingerprint'] = hashlib.md5(cert_der).hexdigest().upper()