基于python3 flet库的证书查看工具

前言

---

基于python3 flet库实现了证书信息的提取，留作自用，如有错误欢迎指正。

正文

---

程序架构：

主程序 main.py

证书解析程序 certHandle.py

运行 python main.py

main.py

# -*- coding:utf-8 -*-
import base64
import traceback
import json
import flet as ft
from certHandle import get_info_from_cert_pem

def main(page: ft.Page):
    page.title = "证书查看工具"
    page.scroll = "auto"

    def btn_submit_clicked(e):
        if not txt_cert_in.value:
            txt_cert_in.error_text = "请粘贴证书字符串"
            page.update()
            return
        else:
            cert_in = txt_cert_in.value

        if not dropdown_timezone.value:
            dlg = ft.AlertDialog(
                title=ft.Text("Error"),
                content=ft.Text("请选择时区")
            )
            page.dialog = dlg
            dlg.open = True
            page.update()
            return

        timezone = dropdown_timezone.value
        use_local_time = False
        if timezone == "local":
            use_local_time = True

        err_msg = None
        cert_out = None
        try:
            cert_out = get_info_from_cert_pem(cert_in, use_local_time)
            cert_out = json.loads(cert_out)
            cert_out = json.dumps(cert_out, indent=4)
        except Exception as e:
            err_msg = traceback.format_exc()

        if cert_out is None or err_msg is not None:
            txt_cert_out.error_text = "证书解析失败"
            txt_cert_out.value = ""
            page.update()
        else:
            txt_cert_out.value = cert_out
            page.update()

    def btn_clean_clicked(e):
        txt_cert_in.value = ""
        txt_cert_out.value = ""
        page.update()

    # 证书输入
    txt_cert_in = ft.TextField(
        label="请粘贴证书字符串"
    )

    # 时间下拉框提示
    txt_timezone = ft.Text("请选择时区")
    # 时间下拉框
    dropdown_timezone = ft.Dropdown(
        width=130,
        options=[
            ft.dropdown.Option(key="org", text="原始时区"),
            ft.dropdown.Option(key="local", text="本地时区"),
        ]
    )

    # 确认按钮
    btn_submit = ft.ElevatedButton(text="确认", on_click=btn_submit_clicked)

    # 清空按钮
    btn_clean = ft.ElevatedButton(text="清空", on_click=btn_clean_clicked)

    # 证书输出
    txt_cert_out = ft.TextField(
        label="证书解析结果",
        multiline=True,
        height=400,
        text_align=ft.TextAlign.LEFT
    )
    # txt_cert_out = ft.Text(selectable=True, text_align=ft.TextAlign.LEFT)
    # txt_cert_out = ft.Markdown(
    #     selectable=True,
    #     extension_set=ft.MarkdownExtensionSet.GITHUB_WEB,
    #     on_tap_link=lambda e:page.launch_url(e.data)
    # )

    page.add(
        # 输入证书内容
        txt_cert_in,
        # 时区选择
        ft.Row(
            [
                txt_timezone,
                dropdown_timezone
            ]
        ),
        ft.Divider(),
        # 解析结果
        txt_cert_out,
        # 按钮行
        ft.Row(
            [
                btn_submit,
                btn_clean
            ]
        )
    )

if __name__ == "__main__":
    ft.app(target=main)
    # ft.app(target=main, view=ft.AppView.WEB_BROWSER)

certHandle.py

import base64
import hashlib
import traceback

from OpenSSL.crypto import load_certificate, FILETYPE_PEM, dump_publickey, FILETYPE_ASN1
from cryptography import x509
from cryptography.hazmat.backends import default_backend

from base64 import b64encode
from datetime import datetime
import pytz
import json

from cryptography.hazmat.primitives import hashes

def get_info_from_cert_pem(cert_str: str, use_local_time:bool = False) -> str | None:
    """
    从证书获取详细信息
    """
    cert_str = reformat_cert(cert_str)
    info_dict = {}
    try:
        cert = load_certificate(FILETYPE_PEM, cert_str)
        # 备用解析 - 另一种解析方式
        cert_standby = x509.load_pem_x509_certificate(cert_str.encode(), default_backend())

        # 签发者信息
        issuer = cert.get_issuer()
        issuer_info = analy_components(issuer.get_components())
        issuer_hash = hex(issuer.hash()).replace("0x", "")
        info_dict["issuer"] = {}
        info_dict["issuer"]["info"] = issuer_info
        info_dict["issuer"]["hash"] = issuer_hash

        # 主体信息
        subject = cert.get_subject()
        subject_info = analy_components(subject.get_components())
        subject_hash = hex(subject.hash()).replace("0x", "")

        info_dict["subject"] = {}
        info_dict["subject"]["info"] = subject_info
        info_dict["subject"]["hash"] = subject_hash

        # 证书串号
        serial_num = hex(cert.get_serial_number()).replace("0x", "")
        info_dict["serial_num"] = serial_num

        # 有效期
        valid_before = format_time(cert.get_notBefore(), to_local=use_local_time)
        valid_after = format_time(cert.get_notAfter(), to_local=use_local_time)
        info_dict["valid_before"] = valid_before
        info_dict["valid_after"] = valid_after

        # 版本信息 -- 好像不准
        # version = cert.get_version()
        version = cert_standby.version

        info_dict["cert_version"] = version.name

        # 签名算法
        algorithm = cert.get_signature_algorithm().decode()

        info_dict["cert_algorithm"] = algorithm

        # 证书指纹
        cert_thumbprint_sha1 = cert.digest("SHA1").decode()
        cert_thumbprint_sha256 = cert.digest("SHA256").decode()
        cert_thumbprint_md5 = cert.digest("MD5").decode()

        info_dict["cert_thumbprint"] = {}
        info_dict["cert_thumbprint"]["sha1"] = cert_thumbprint_sha1
        info_dict["cert_thumbprint"]["sha256"] = cert_thumbprint_sha256
        info_dict["cert_thumbprint"]["md5"] = cert_thumbprint_md5

        # 证书主体指纹
        cert_tbs_thumbprint_sha1 = hashlib.sha1(cert_standby.tbs_certificate_bytes).digest().hex()
        cert_tbs_thumbprint_sha1_b64 = base64.b64encode(hashlib.sha1(cert_standby.tbs_certificate_bytes).digest()).decode()

        info_dict["cert_tbs_thumbprint"] = {}
        info_dict["cert_tbs_thumbprint"]["sha1"] = cert_tbs_thumbprint_sha1
        info_dict["cert_tbs_thumbprint"]["sha1_b64"] = cert_tbs_thumbprint_sha1_b64

        # 公钥指纹
        public_key = cert.get_pubkey()
        public_key_pem = dump_publickey(FILETYPE_ASN1, public_key)
        public_key_thumbprint_sha1 = hashlib.sha1(public_key_pem).digest().hex()
        public_key_thumbprint_sha256 = hashlib.sha256(public_key_pem).digest().hex()
        public_key_thumbprint_sha1_b64 = base64.b64encode(hashlib.sha1(public_key_pem).digest()).decode()

        info_dict["public_key_thumbprint"] = {}
        info_dict["public_key_thumbprint"]["sha1"] = public_key_thumbprint_sha1
        info_dict["public_key_thumbprint"]["sha256"] = public_key_thumbprint_sha256
        info_dict["public_key_thumbprint"]["sha1_b64"] = public_key_thumbprint_sha1_b64

        # 扩展信息

        info_dict["extensions"] = {}

        extensions_cnt = cert.get_extension_count()
        for i in range(extensions_cnt):
            name = cert.get_extension(i).get_short_name().decode()
            value = cert.get_extension(i)

            if name == "subjectKeyIdentifier":
                thumbprint = cert_standby.extensions.get_extension_for_oid(x509.oid.ExtensionOID.SUBJECT_KEY_IDENTIFIER).value.digest
                info_dict["extensions"][name] = {}
                info_dict["extensions"][name]["value"] = "{0}".format(value)
                info_dict["extensions"][name]["b64"] = base64.b64encode(thumbprint).decode()
            else:
                info_dict["extensions"][name] = "{0}".format(value)

    except Exception as e:
        return traceback.format_exc()
    info_str = json.dumps(info_dict)
    return info_str

def analy_components(components: list | None) -> str | None:
    """
    解析 list[tuple(b'',b'')] 类型
    :return:
    """
    res = ""
    try:
        tmp_list = []
        for i in components:
            (k, v) = i
            tmp_list.append("{0}={1}".format(k.decode(), v.decode()))
        res = ",".join(tmp_list)
    except Exception as e:
        traceback.print_exc()
    return res

def format_time(time_org: bytes, to_local:bool = False)->str:
    """
    将证书中得到的时间格式化
    :param time_org: 原始时间字节串
    :param to_local: 是否转换为本地时间
    :return:
    """
    time_str = time_org.decode("utf-8")
    try:

        datetime_obj = datetime.strptime(time_str, "%Y%m%d%H%M%SZ")
        # 上海时区
        local_tz = pytz.timezone('Asia/Shanghai')
        datetime_local = pytz.utc.localize(datetime_obj).astimezone(local_tz)
        if to_local:
            time_str = datetime_local.strftime("%Y-%m-%d %H:%M:%S")
        else:
            time_str = datetime_obj.strftime("%Y-%m-%d %H:%M:%S")
    except Exception as e:
        traceback.print_exc()
    return time_str

def reformat_cert(cert_in:str)->str|None:
    """
    重新格式化证书
    :param cert_in:证书字符串
    :return:
    """
    cert_out = None
    cert_header = "-----BEGIN CERTIFICATE-----"
    cert_tail = "-----END CERTIFICATE-----"
    if cert_in:
        if "\r" in cert_in:
            cert_in = cert_in.replace("\r","")
        if "\\n" in cert_in:
            cert_in = cert_in.replace("\\n", "")
        if "\n" in cert_in:
            cert_in = cert_in.replace("\n", "")
        cert_in = cert_in.replace(cert_header, "")
        cert_in = cert_in.replace(cert_tail, "")
        cert_body = base64.b64encode(base64.b64decode(cert_in.encode())).decode()
        cert_out = "{0}\n{1}\n{2}".format(cert_header, cert_body, cert_tail)
    return cert_out