topic Re: Get SSL details thorugh portalpy in Python Questions

Get SSL details thorugh portalpy

ADITYAKUMAR1 — Sun, 12 Dec 2021 03:16:38 GMT

Hi team,

I am working on portal.py. I am trying to get the details of SSL certficates which the portal is using.

I have tried with some code but nothing is working. Any suggestion on this will be helpful.

import sys
sys.path.append('..')   
import portalpy     
import csv   
import ssl, socket  
portalUrl           = "https://xxx-xxx.xx.xx.com:7443/arcgis"
portalAdminUser     = "xxxx"
portalAdminPassword = "xxxx"        
portal = portalpy.Portal(portalUrl, portalAdminUser,portalAdminPassword)     
users = portal.search_users('(role:account_admin OR role:account_publisher  OR role:account_user)')   
activeUser = portal.logged_in_user()      
print activeUser['email']     
ctx = ssl.create_default_context()      
s = ctx.wrap_socket(socket.socket(),server_hostname='http://xxx-xxx.xxxx.com/arcgis/home/')     
s.connect((portal, 443))     
cert = s.getpeercert()      
print cert
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Thanks

Aditya Kumar

Re: Get SSL details thorugh portalpy

RebeccaStrauch__GISP — Wed, 14 Dec 2016 17:50:56 GMT

I edited your post and formatted the python code to help others to debug.

For future reference, so format your code, in the toolbar for the post/comment,

click on the ...
Select MORE
Select Syntax Highlighter
Select your programming language
post your code.

Re: Get SSL details thorugh portalpy

JoshuaBixby — Sun, 12 Dec 2021 03:16:41 GMT

Does the following from StackOverflow work: How can i get Certificate issuer information in python?

import ssl, socket

hostname = 'xxx-xxx.xxxx.com'
ctx = ssl.create_default_context()
s = ctx.wrap_socket(socket.socket(), server_hostname=hostname)
s.connect((hostname, 443))
cert = s.getpeercert()

subject = dict(x[0] for x in cert['subject'])
issued_to = subject['commonName']
issuer = dict(x[0] for x in cert['issuer'])
issued_by = issuer['commonName']‍‍‍‍‍‍‍‍‍‍‍‍

Re: Get SSL details thorugh portalpy

ADITYAKUMAR1 — Thu, 15 Dec 2016 01:47:05 GMT

It failed to connect. Tried the same.

Re: Get SSL details thorugh portalpy

RebeccaStrauch__GISP — Thu, 15 Dec 2016 02:41:51 GMT

I tried that and got an error from line 4

import ssl, socket

hostname = 'mySite'
ctx = ssl.create_default_context()

Traceback (most recent call last):
Python Shell, prompt 6, line 4
AttributeError: 'module' object has no attribute 'create_default_context'

Re: Get SSL details thorugh portalpy

RandyBurton — Thu, 15 Dec 2016 05:20:27 GMT

I used hostname = 'google.com' in line 3 of bixb0012‌'s code, added a couple of print statements and had no issues obtaining google's info.

I would suggest just using your base domain "xx.com" (from your sample code - with no "https://xxx.x....") for the host in line 3 of Joshua's code. You may need to use port 7443 instead of 443 in line 6.

Re: Get SSL details thorugh portalpy

ADITYAKUMAR1 — Thu, 15 Dec 2016 12:42:28 GMT

Thanks a lot Randy Butron and Joshua. It really helped and its working.

Re: Get SSL details thorugh portalpy

RebeccaStrauch__GISP — Thu, 15 Dec 2016 16:21:55 GMT

For my machine, it must be another issue. For me, even after importing the ssl, it doesn't find

ssl.create_default_context

and never gets to the next line. Using Wing Pro 5.1.12-1 python shell and ArcCatalog python window. Somehow I must be getting an incorrect version of ssl ?? the ssl comes up in the intellisense (i.e. other ssl attributes work), but not the create_default_context. Not critical for my work right now so I won't spend a lot of time figuring it out on my system, but it does sound like a nice tool.

Re: Get SSL details thorugh portalpy

RandyBurton — Thu, 15 Dec 2016 18:04:23 GMT

From github, ssl.create_default_context was added in 2.7.9. I also received the same error as you when using Python 2.7.5.

Re: Get SSL details thorugh portalpy

ADITYAKUMAR1 — Thu, 29 Dec 2016 17:22:49 GMT

I was able to get al the details. But I am not able to segregate the details. Like expiry date,issued date,serial number.

Any idea?

Re: Get SSL details thorugh portalpy

JoshuaBixby — Sun, 12 Dec 2021 03:16:44 GMT

If you are using 2.7.9 or later, the examples already provided will get you the information you want. The cert information is returned as a dictionary containing a mix of tuple, Unicode, string, and long; so you just need to explore the structure of that dictionary to know which keys and values to work with.

Using GeoNet as an example:

>>> import ssl, socket
>>> 
>>> hostname = 'geonet.esri.com'
>>> ctx = ssl.create_default_context()
>>> s = ctx.wrap_socket(socket.socket(), server_hostname=hostname)
>>> s.connect((hostname, 443))
>>> cert = s.getpeercert()
>>> 
>>> props = []
>>> props.append(('Valid from', cert['notBefore']))
>>> props.append(('Valid to', cert['notAfter']))
>>> props.append(('Serial number', cert['serialNumber']))
>>> 
>>> for name,value in props:
...     print "{:<20}{}".format(name, value)
...     
Valid from          Sep 30 00:00:00 2016 GMT
Valid to            Nov 29 23:59:59 2017 GMT
Serial number       616FD344BDA2F974F351E1F18CFE8881
>>> ‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Get SSL details thorugh portalpy

RebeccaStrauch__GISP — Sun, 12 Dec 2021 03:16:46 GMT

Joshua,

I was able to run this in the Pro python window, but had to add ( ) around the print string. Based on things I've read on one of Dan's /blogs/dan_patterson/2016/05/09/the-links?sr=search&searchId=a1012d53-da1f-4df7-b109-573165a00e62&searchIndex=3‌ blogs, that is a requirement for the 3.x python flavors.

So, yours is the correct answer, but here it is with the change

import ssl, socket
hostname = 'geonet.esri.com'

ctx = ssl.create_default_context()
s = ctx.wrap_socket(socket.socket(), server_hostname=hostname)
s.connect((hostname, 443))
cert = s.getpeercert()

props = []
props.append(('Valid from', cert['notBefore']))
props.append(('Valid to', cert['notAfter']))
props.append(('Serial number', cert['serialNumber']))

for name,value in props:
     print ("{:<20}{}".format(name, value))
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I was able to successfully run this against my own hostname. thanks.