1 release 3 tags

RSS feed

• v1.2.0 31c281f42c

  Compare

  tls-cert-watchdog v1.2.0 Stable

  Ghost released this 2026-10-16 19:57:40 -07:00 | 17 commits to main since this release

  • Protocol enumeration: TLS 1.0, 1.1, 1.2 and 1.3 are each tried separately, so a server that offers
    TLS 1.3 and still accepts TLS 1.0/1.1 is flagged (HIGH; MEDIUM on STARTTLS services). Missing TLS 1.3 is LOW.
    --no-protocol-scan skips it.
  • STARTTLS: SMTP/submission, IMAP, POP3, FTP (AUTH TLS) and PostgreSQL (SSLRequest), chosen by
    smtp://-style schemes, the well-known port, or --starttls.
  • Key type and size (RSA < 2048, DSA, weak EC curves are HIGH).
  • The served chain (Python 3.13+) with each certificate's subject/issuer/expiry; expiring intermediates are HIGH.
  • --fail-on (default high, the previous behaviour).
  • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog.git
    puts a tls-cert-watchdog command on PATH (pyproject.toml, MIT license metadata).
  • --version flag.
  • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
  • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
  • CI installs the package with pip in a clean venv and checks --version/--help on every push.

  Install

  pipx install git+https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog.git@v1.2.0
  # or the wheel attached to this release:
  pipx install https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog/releases/download/v1.2.0/tls_cert_watchdog-1.2.0-py3-none-any.whl
  # or the single file (stdlib-only Python 3):
  curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog/releases/download/v1.2.0/cert_watch.py
  

  SHA-256

  2906c45e05f395333adf464232e5fa13c6efd41c7fe9aa3368dd96b7bd89f00a  cert_watch.py
  2c965c36b9efefca9b8ae53a36203db4b677d07fa520c8022581125359969ecd  tls_cert_watchdog-1.2.0-py3-none-any.whl
  0ca42fd5e31f3a33b888fa156e06c956243e0c93ec527e0bbb9ae30fc8d3305a  tls_cert_watchdog-1.2.0.tar.gz
  

  Downloads

  • cert_watch.py
    13 downloads · 2026-10-16 20:18:10 -07:00 · 23 KiB
  • SHA256SUMS
    11 downloads · 2026-10-16 20:18:11 -07:00 · 284 B
  • tls_cert_watchdog-1.2.0-py3-none-any.whl
    14 downloads · 2026-10-16 20:18:10 -07:00 · 12 KiB
  • tls_cert_watchdog-1.2.0.tar.gz
    14 downloads · 2026-10-16 20:18:11 -07:00 · 17 KiB

  ---

  • Source code (ZIP)
    13 downloads
  • Source code (TAR.GZ)
    11 downloads