CanuteTheGreat/tls-cert-watchdog
Watch
1
0
Fork
You've already forked tls-cert-watchdog
 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
2 releases 4 tags
  • v1.3.0 065ca5f338

    tls-cert-watchdog v1.3.0
    All checks were successful
    tests / test (3.14) (push) Successful in 46s
    Details
    release / release (push) Successful in 24s
    Details
    tests / test (3.8) (push) Successful in 45s
    Details
    Stable

    CanuteTheGreat released this 2026-11-10 03:19:32 -08:00 | 4 commits to main since this release

    • OCSP and must-staple: every certificate's OCSP responder URL (Authority Information Access) and
      its TLS Feature must-staple flag are now reported (ocsp in --json, an OCSP: line in the text
      report). New --ocsp flag asks the responder whether the certificate is revoked (HIGH when revoked,
      MEDIUM when the responder does not know it, LOW when the check cannot be made, e.g. the server's
      chain is unavailable before Python 3.13). A must-staple certificate with no responder is MEDIUM.
      The responder's signature is not verified (stdlib only); verdicts are tested against openssl ocsp.

    • Tests: accuracy suite against openssl s_client (9 certificate variants incl. a missing intermediate and a full chain; 6 server protocol ranges, every version compared), mutation testing (nightly), claims ledger. No detection differences were found.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog.git@v1.3.0
# or the wheel attached to this release:
pipx install https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog/releases/download/v1.3.0/tls_cert_watchdog-1.3.0-py3-none-any.whl
# or the single file (stdlib-only Python 3):
curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/tls-cert-watchdog/releases/download/v1.3.0/cert_watch.py

    SHA-256

    343555de5f4c781387130a71b1dfadb41c1573f56d72414d21bc22a64a62a6b4  cert_watch.py
b9526864288f7c33bcb300c31c544a423c0d22fcab5843efe3e46d53b508072c  tls_cert_watchdog-1.3.0-py3-none-any.whl
f810d13a10471d970fa5c4294a445f819351cc9fcb0e22147c9618472b717424  tls_cert_watchdog-1.3.0.tar.gz
    Downloads