checkCerts.py

#!/usr/bin/env python3
import OpenSSL
import datetime
import requests
import ssl
import socket
from synack import synack

def process_server_cert(url, port=443, name=None):
    if name is None:
        name = url
    process_cert(name, ssl.get_server_certificate((url, port)))

def process_cert(name, cert):
    try:
        x509 = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, cert)
        exp_date = datetime.datetime.strptime(x509.get_notAfter().decode(), '%Y%m%d%H%M%SZ')
        now = datetime.datetime.now()
        
        exp_days = (exp_date-now).days
        print(f'{name}: Expires {exp_date.strftime("%Y-%m-%d")} ({exp_days} days)')
        
        if exp_days <= 14:
            print('****************************************************************')
            print(f'WARNING: {name} is expiring soon! Send Synack a support ticket!')
            print('****************************************************************')
    except Exception as err:
        print(f"Could not retrieve {name}: {err}")

# Platform
process_server_cert('platform.synack.com')

# LP CA cert
process_cert('CA cert', requests.get("https://storage.googleapis.com/wolfacid-prod-public/ca-root.cer").content)

# LP Test
process_server_cert('synack-launchpoint-test.com')

# LP+
process_server_cert('amberjack.synack-lp.com')

# TuPoC
process_server_cert('x1.pe')

# ¯\_(ツ)_/¯
process_server_cert('boss.synack.com')
process_server_cert('client.synack.com')
process_server_cert('login.synack.com')
process_server_cert('acropolis.synack.com')
process_server_cert('gladiolus.synack.com')

# OpenVPN LP Cert
try:
    s1 = synack()
    s1.gecko=False
    s1.getSessionToken()
    lp_creds = s1.getLPCredentials()
    ovpn_file = lp_creds["openvpn_file"]

    cert_start = ovpn_file.index(b"-----BEGIN CERTIFICATE-----")
    cert_end = ovpn_file.index(b"-----END CERTIFICATE-----") + len(b"-----END CERTIFICATE-----")
    cert = ovpn_file[cert_start:cert_end]
    process_cert('OpenVPN LP cert', cert)
    
except Exception as err:
    print(f"Could not obtain LP OpenVPN credentials: {err}")