check_cert

ciecplib.x509.check_cert(cert, hours=1, proxy=None, rfc3820=True)

Validate an X509 certificate.

Parameters:

  • cert (cryptography.x509.Certificate) – the certificate object to check

  • hours (float, optional) – minimum number of hours remaining before expiry

  • proxy (bool, None, optional) – if True (False), validate that the certificate is (is not) an impersonation proxy, if None (default) don’t check.

  • rfc3820 (bool, optional) – if True assert that, if the certificate is a proxy, that it is RFC 3820 compliant