Method _parse_x509_certificate

validators/http_validator.py:290–336

Parse X.509 certificate object into standard format

(self, cert_obj)

        return extensions
    
    def _parse_x509_certificate(self, cert_obj):
        """Parse X.509 certificate object into standard format"""
        try:
            # Extract subject and issuer
            subject = []
            for attribute in cert_obj.subject:
                subject.append([attribute.oid._name, attribute.value])
            
            issuer = []
            for attribute in cert_obj.issuer:
                issuer.append([attribute.oid._name, attribute.value])
            
            # Extract dates (use UTC versions to avoid deprecation warning)
            try:
                not_before = cert_obj.not_valid_before_utc.strftime('%b %d %H:%M:%S %Y %Z')
                not_after = cert_obj.not_valid_after_utc.strftime('%b %d %H:%M:%S %Y %Z')
            except AttributeError:
                # Fallback for older cryptography versions
                not_before = cert_obj.not_valid_before.strftime('%b %d %H:%M:%S %Y %Z')
                not_after = cert_obj.not_valid_after.strftime('%b %d %H:%M:%S %Y %Z')
            
            # Extract extensions
            extensions = {}
            try:
                san_ext = cert_obj.extensions.get_extension_for_oid(x509.ExtensionOID.SUBJECT_ALTERNATIVE_NAME)
                san_list = []
                for name in san_ext.value:
                    if hasattr(name, 'value'):
                        san_list.append(('DNS', name.value))
                    elif hasattr(name, 'ip_address'):
                        san_list.append(('IP Address', str(name.ip_address)))
                extensions['subjectAltName'] = san_list
            except:
                extensions['subjectAltName'] = []
            
            return {
                'subject': subject,
                'issuer': issuer,
                'version': cert_obj.version.value + 1,  # X.509 versions are 0-indexed
                'serialNumber': str(cert_obj.serial_number),
                'notBefore': not_before,
                'notAfter': not_after,
                'subjectAltName': extensions.get('subjectAltName', [])
            }
            
        except Exception as e:
            return {'error': str(e)[:MAX_ERROR_LENGTH]}
    
    def test_http_connectivity(self, ip, port):
        """Test HTTP/HTTPS connectivity to a specific IP:port"""