Package: check-tls-certs
check-tls-certsCheck TLS certificates of domains for expiration dates and more.InstallationIt’s recommended to use Python 3.5 or newer on macOS,
because DNS lookups work in parallel and thus much faster when checking several domains.Best installed viapipsi:% pipsi install check-tls-certsOr some other way to install a python package with included scripts.UsageUsage: check_tls_certs [OPTIONS] [DOMAIN]...

  Checks the TLS certificate for each DOMAIN.

  You can add checks for alternative names by separating them with a slash,
  like example.com/www.example.com.

  Wildcard domains are supported.

  Exits with return code 3 when there are warnings, code 4 when there are
  errors, code 6 when more than half of the domains raised an exception
  during fetch and code 5 when the domain definition contains errors.

Options:
  -f, --file FILE  File to read domains from. One per line.
  -v, --verbose    Increase verbosity. Can be used several times. Currently
                   max verbosity is 2.
  --help           Show this message and exit.When domains are read from a file, lines starting with a#are ignored.
If a line in a file ends in a/, it is joined with the next line.
This allows you to group many domains using the same certificate.If a domain starts with a!it is checked to be in the list of alternate names,
but the TLS certificate for it will not be fetched and checked.
This is useful for domains that aren’t accessible for some reason.The default port 443,
to which the connection is made to fetch the certificate,
can be changed by adding it to the domain separated by a colon likeexample.com:1234.You can change the actually used host used for the connection by separating it with a|symbol,
for exampleexample.com|192.168.0.1will use the IP192.168.0.1to connect.Changelog0.12.0 - 2020-11-26Drop support for Python < 3.6.
[fschulze]Fix setting hostname when using|.
[fschulze]Set timeout on socket before wrapping it in the SSL Connection.
[fschulze]Allow overriding the threshold for expiration warnings with-eoption.
[fschulze]Refactor exception handling. If more than half of the domains throw an
exception during fetch, an exit code of 6 is returned instead of 4.
[fschulze]0.11.0 - 2018-01-07Support wildcard certificates.
[fschulze]0.10.0 - 2017-11-24Validate the certificate chain.
[fschulze]Allow specifying a host used for the actual connection using|.
[fschulze]Re-raise actual connection errors, so the exit code of the script indicates
a failure.
[fschulze]0.9.1 - 2017-04-05Re-release because of premature upload.
[fschulze]0.9.0 - 2017-04-05Add 5 second timeout and print more detailed error messages.
[fschulze]If a line ends in a/it is joined with the next line when reading
domains from a file.
[fschulze]Sort domain names in output.
[fschulze]0.8.0 - 2016-05-09Validate the certificate chain sent by the server.
[fschulze]0.7.0 - 2016-05-09Get current time once to avoid duplicate expiry messages.
[fschulze]Mark certificates from staging server with error.
[fschulze]0.6.0 - 2016-02-20Fix comparison if there is no expiration time.
[fschulze]Allow port in domain name, to which the ssl connection is made instead of the
default 443, be specified.0.5.0 - 2016-02-17Use UTC time to calculate expiration time.
[fschulze]Add another verbosity level (and remove-q/--quite). By default nothing
is printed except when there are errors. The first level-valways
prints the earliest expiration date. The second level-vvprints all the
info.0.4.0 - 2016-02-12When prefixing a domain with a!the certificate will not be fetched and
checked, but it’s name well be checked to be in the list of alternate names.
[fschulze]Change handling of alternate names, so checking for just one domain when a
certificate is valid for several works.
[fschulze]By default only print messages for domains with errors. Use-voption
to print infos for all domains.
[fschulze]Allow comments starting with#in domain file.
[fschulze]Get rid ofopensslexecutable requirement.
[fschulze]0.3.0 - 2016-01-01Use asyncio to fetch certificates in parallel.
[fschulze]0.2.0 - 2015-12-22Actually support Python 3.4 as advertised.
[fschulze]Fix packaging.
[witsch]Round expiry time delta to minutes for nicer output.
[fschulze]Skip duplicate messages for alternate names.
[fschulze]Add certificate issuer to output.
[fschulze]Mark sha1 certificate signature as error.
[fschulze]0.1.0 - 2015-12-20Initial release
[fschulze]