#?coding:?utf-8?
#?查詢域名證書到期情況
import?re
import?subprocess
from?datetime?import?datetime
def?get_re_match_result(pattern,?string):
????match?=?re.search(pattern,?string)
????return?match.group(1)
def?parse_time(date_str):
????return?datetime.strptime(date_str,?"%b?%d?%H:%M:%S?%Y?GMT")
def?format_time(date_time):
????return?datetime.strftime(date_time,?"%Y-%m-%d?%H:%M:%S")
def?get_cert_info(domain):
????"""獲取證書信息"""
????cmd?=?f"curl?-Ivs?https://{domain}?--connect-timeout?10"
????exitcode,?output?=?subprocess.getstatusoutput(cmd)
????#?正則匹配
????start_date?=?get_re_match_result('start?date:?(.*)',?output)
????expire_date?=?get_re_match_result('expire?date:?(.*)',?output)
????#?解析匹配結(jié)果
????start_date?=?parse_time(start_date)
????expire_date?=?parse_time(expire_date)
????return?{
????????'start_date':?start_date,
????????'expire_date':?expire_date
????}
def?get_cert_expire_date(domain):
????"""獲取證書剩余時間"""
????info?=?get_cert_info(domain)
????print(info)
????expire_date?=?info['expire_date']
????#?剩余天數(shù)
????return?(expire_date?-?datetime.now()).days
if?__name__?==?"__main__":
????domain?=?'www.baidu.com'
????expire_date?=?get_cert_expire_date(domain)
????print(expire_date)

#?-*-?coding:?utf-8?-*-
import?socket
import?ssl
def?get_domain_cert(domain):
????"""
????獲取證書信息
????:param?domain:?str
????:return:?dict
????"""
????socket.setdefaulttimeout(5)
????cxt?=?ssl.create_default_context()
????skt?=?cxt.wrap_socket(socket.socket(),?server_hostname=domain)
????skt.connect((domain,?443))
????cert?=?skt.getpeercert()
????skt.close()
????return?cert
if?__name__?==?"__main__":
????print(get_domain_cert("www.baidu.com"))

import?socket
import?ssl
def?get_domain_cert(host,?port=443,?timeout=3):
????"""
????獲取證書信息
????存在問題：沒有指定主機ip，不一定能獲取到正確的證書信息
????:param?host:?str
????:param?port:?int
????:param?timeout:?int
????:return:?dict
????"""
????context?=?ssl.create_default_context()
????with?socket.create_connection(address=(host,?port),?timeout=timeout)?as?sock:
????????with?context.wrap_socket(sock,?server_hostname=host)?as?wrap_socket:
????????????return?wrap_socket.getpeercert()

#?-*-?coding:?utf-8?-*-
import?socket
import?ssl
from?dateutil?import?parser
#?requests.packages.urllib3.disable_warnings()
try:
????_create_unverified_https_context?=?ssl._create_unverified_context
except?AttributeError:
????#?Legacy?Python?that?doesn't?verify?HTTPS?certificates?by?default
????pass
else:
????#?Handle?target?environment?that?doesn't?support?HTTPS?verification
????ssl._create_default_https_context?=?_create_unverified_https_context
DATETIME_FORMAT?=?'%Y-%m-%d?%H:%M:%S'
socket.setdefaulttimeout(5)
def?get_domain_ip(domain):
????"""
????獲取ip地址
????:param?domain:?str
????:return:?str
????"""
????try:
????????addrinfo?=?socket.getaddrinfo(domain,?None)
????????return?addrinfo[0][-1][0]
????except?Exception?as?e:
????????pass
????return?None
def?get_domain_cert(domain):
????"""
????獲取證書信息
????:param?domain:?str
????:return:?dict
????"""
????cxt?=?ssl.create_default_context()
????skt?=?cxt.wrap_socket(socket.socket(),?server_hostname=domain)
????skt.connect((domain,?443))
????cert?=?skt.getpeercert()
????skt.close()
????return?cert
def?get_cert_info(domain):
????"""
????獲取證書信息
????:param?domain:?str
????:return:?dict
????"""
????cert?=?get_domain_cert(domain)
????issuer?=?_tuple_to_dict(cert['issuer'])
????subject?=?_tuple_to_dict(cert['subject'])
????return?{
????????'domain':?domain,
????????'ip':?get_domain_ip(domain),
????????'subject':?_name_convert(subject),
????????'issuer':?_name_convert(issuer),
????????#?'version':?cert['version'],
????????#?'serial_number':?cert['serialNumber'],
????????'start_date':?_parse_time(cert['notBefore']),
????????'expire_date':?_parse_time(cert['notAfter']),
????}
def?_tuple_to_dict(cert_tuple):
????"""
????cert證書?tuple轉(zhuǎn)dict
????:param?cert_tuple:?tuple
????:return:
????"""
????data?=?{}
????for?item?in?cert_tuple:
????????data[item[0][0]]?=?item[0][1]
????return?data
def?_name_convert(data):
????"""
????名字轉(zhuǎn)換
????:param?data:?dict
????:return:?dict
????"""
????name_map?=?{
????????'C':?'countryName',
????????'CN':?'commonName',
????????'O':?'organizationName',
????????'OU':?'organizationalUnitName',
????????'L':?'localityName',
????????'ST':?'stateOrProvinceName'
????}
????dct?=?{}
????for?key,?value?in?name_map.items():
????????dct[key]?=?data.get(value,?'')
????return?dct
def?_parse_time(time_str):
????"""
????解析并格式化時間
????:param?time_str:?str
????:return:?str
????"""
????return?parser.parse(time_str).astimezone().strftime(DATETIME_FORMAT)
if?__name__?==?"__main__":
????print(get_cert_info("www.baidu.com"))

pip?install?pyOpenSSL

#?-*-?coding:?utf-8?-*-
import?ssl
import?OpenSSL
def?get_ssl_expire_date(host,?port=443):
????cert?=?ssl.get_server_certificate((host,?port))
????x509?=?OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM,?cert)
????return?x509.get_notAfter().decode()
if?__name__?==?'__main__':
????print(get_ssl_expire_date('www.baidu.com'))
????#?20230806051601Z

$?pip?install?domain_admin
#?升級到最新版本，可選
$?pip3?install?-U?domain-admin?-i?https://pypi.org/simple
#?啟動運行
$?gunicorn?'domain_admin.main:app'