Building a python application for certificate renewal/installation

hsowani · April 27, 2021, 8:55pm

Hi, is there a python library to get the list of certificates obtained via certbot? looking to find if there's a way i can programaticaly (via Python) access the list of certificates that certbot manages - including details like their expiry dates/serial numbers etc. Thanks in advance for any input!

jvanasco · April 27, 2021, 10:49pm

Certbot is written in Python, so you could write your application against it's code.

schoen · April 29, 2021, 7:47pm

In particular, you might check this part of the code:

github.com

certbot/certbot/blob/2cf177586497724f0eebbbe85cfcb9432f6963cf/certbot/certbot/_internal/cert_manager.py#L69




    lineage = lineage_for_certname(config, certname)
    if not lineage:
        raise errors.ConfigurationError("No existing certificate with name "
            "{0} found.".format(certname))
    storage.rename_renewal_config(certname, new_certname, config)
    disp.notification("Successfully renamed {0} to {1}."
        .format(certname, new_certname), pause=False)




def certificates(config):
    """Display information about certs configured with Certbot


    :param config: Configuration.
    :type config: :class:`certbot._internal.configuration.NamespaceConfig`
    """
    parsed_certs = []
    parse_failures = []
    for renewal_file in storage.renewal_conf_files(config):
        try:
            renewal_candidate = storage.RenewableCert(renewal_file, config)

The fact that it's in the _internal directory means that the Certbot developers aren't promising to keep it working in the future or to keep the name and interface the same (so you might need to keep that risk in mind in terms of your own support for your own software).

You can also trace that through to the human_readable_cert_info function, which is rendering a lot of parsed information about individual certificates.

hsowani · April 29, 2021, 7:57pm

thanks for your input - i'll look into these

system · May 29, 2021, 7:58pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.