asn1_der.qwer · 1.0.0ASN.1 read to a tree and written back, with DER's rules enforced and BER's looseness when asked: tags of any size, OIDs with a table of names, UTCTime and GeneralizedTime, integers of any size, every string type, SETs sorted, PEM, a dump in the manner of `openssl asn1parse`. Indefinite lengths are refused in DER, and bad lengths, tags and values are errors naming their offset, never panics.4 views · 8 downloadsPEM pem.qwer · 1.0.0PEM bundles read block by block (certificates, keys and requests, with their labels, headers, key algorithm and SHA-256), blocks picked out, written, and turned into DER files and back.6 views · 7 downloadsACME certificates acme.qwer · 1.0.0Let's Encrypt's ACME v2 by hand: account, order, HTTP-01 and DNS-01 values, JWS with ES256, nonces kept and retried on badNonce, finalize with a CSR made here, the chain downloaded, its dates read, and revocation.3 views · 7 downloadsCertificate Transparency ct_logs.qwer · 1.0.0Read the SCTs in a certificate and check them against each log's key, ask a log for tree heads, entries and proofs, and verify Merkle audit and consistency proofs, so a certificate is shown to be logged and a log not to have rewritten history.5 views · 7 downloadsOCSP ocsp.qwer · 1.0.0Ask whether a certificate is still good: URLs read from the certificate, OCSP requests built with a nonce, responses read with status, reason and times, and the signature checked against the issuer or a delegated responder it authorized.3 views · 9 downloadsPKCS#12 files pkcs12.qwer · 1.0.0Read .p12 and .pfx files in pure Rust, key and chain out in order, MAC and password checked, modern PBES2 with AES, and write ones OpenSSL opens. The old RC2, RC4 and 3DES ciphers are refused by name, with how to convert the file.2 views · 8 downloadsSSH certificates ssh_certs.qwer · 1.0.0Read OpenSSH certificates with their principals, validity, critical options and CA, check them as sshd would, and sign new ones with a CA key, for short-lived access. Differs from ssh_keys, which reads plain keys.4 views · 8 downloadsTLS certificate checks tls_expiry.qwer · 1.0.0A server's certificate chain fetched from host:port and checked as browsers do: trusted by Mozilla's roots or yours, in order, covering the name, and the days until the first certificate in it expires.8 views · 6 downloadsX.509 certificates x509.qwer · 1.0.0Read X.509 certificates: subject, issuer, the names they cover, validity dates, days left and SHA-256 fingerprint, for expiry alerts.7 views · 6 downloadsOther tags
files61import49api47text47network36forms34webhooks34search32devices31images31email30signing27monitoring26security26maps25uploads24printing23analytics22export22payments22validation20html19reports19database18integration18auth17binary16geo16barcodes15json14labels14logs14banking13invoices13notifications13svg13i18n12ids12iot12performance12sensors12time12calendar11dates11messages11seo11audio10config10documents10events10markdown10maths10storage10urls10ai9alerts9aws9backups9certificates9charts9dns9encryption9keys9languages9passwords9pdf9photos9privacy9social9testing9tls9xml9accounting8compression8finance8games8gps8http8locale8metrics8pagination8statistics8support8addresses7background7cache7chat7docs7geojson7google7llm7messaging7mobile7qr7secrets7shipping7sql7tokens7unicode7b2b6bots6calculators6css6dashboards6devops6embeddings6git6headers6jwt6links6oauth26settings6sign-up6spreadsheets6sso6udp6video6accessibility5admin5bookings5checksums5crm5delivery5experiments5game5history5industrial5integrity5location5memory5money5oauth5observability5phone5receipts5retries5service-account5sign-in5status5stores5tracking5writing5attachments4audit4books4caching4checkout4ci4cli4codes4colors4comments4compliance4counters4crawling4csv4debugging4dependencies4distributed4feeds4gis4health4healthcare4javascript4jobs4migration4podcasts4previews4push4random4rate-limits4reviews4rules4scheduling4scraping4seed4serialization4ssh4streaming4tickets4users4web42fa3assets3authentication3automation3azure3batch3bitcoin3browsers3cards3cars3code3cookies3dedupe3design3diff3ecommerce3encoding3firebase3fonts3forecasting3graphql3hardware3kv3markup3names3openstreetmap3ops3queues3ranking3realtime3releases3rss3shop3signals3sitemaps3sms3sounds3spam3sports3tags3templates3terminal3themes3tiles3tools3versions3word3abuse2access-control2address2archives2atom2authorization2autocomplete2avatars2base642building2cargo2catalog2cdn2changelog2chinese2cloud2cluster2configuration2containers2databases2directions2directory2discovery2docker2documentation2domains2downloads2duplicates2ebooks2editing2emv2exact2expiry2exports2fediverse2flags2folders2forecast2fractions2fun2gamification2gcp2gdpr2geocoding2glob2graphs2hls2identity2index2india2kafka2leases2lighting2lint2localization2locks2logistics2lookup2marine2microsoft2moderation2mongodb2multi-tenant2music2naming2news2newsletters2nosql2notes2npm2ocr2optimization2outdoors2partners2placeholders2places2planning2players2plc2policy2pos2power2pricing2protobuf2prototypes2pwa2query2radio2redis2reporting2robots2rpc2s32scada2scales2schedules2schema2secp256k12segments2servers2sessions2sha2562soap2solver2sqlite2supply-chain2tax2tcp2thumbnails2tooling2transactions2translation2translations2typos2upi2user-content2vehicles2wcag2weather2websockets2xss2yaml2a11ach1activitypub1agenda1aggregation1allen-bradley1allowlists1animation1apple1archive1arguments1arrow1asia1asn1asn11astronomy1atlassian1atproto1aviation1backup1baduk1base581bech321bioinformatics1bip211blake31blog1blogs1board1boards1bolt-111braille1branding1brazil1breaches1build1bulk1calendars1capture1cd1cdp1changes1chapters1chemistry1chess1chords1cities1clap1claude1clickhouse1code-style1colours1columnar1constellations1constraints1contacts1conversion1coordinates1coordination1couchdb1counting1coupons1cql1crawler1cryptography1custom-fields1cypher1dem1deploy1deployments1developer1diagrams1dice1dimacs1distance1dmx1dna1ed255191eip-551elasticsearch1elevation1embeds1embosser1emoji1energy1english1enterprise1equations1ethereum1excel1facets1family-tree1fasta1fastq1feature-flags1federation1feedback1fen1fido21firewall1fixed-width1fleet1forensics1formula1formulas1front-matter1fx1genealogy1generator1genetics1geohash1geoip1geotiff1gif1go1grafana1graph1grid1gzip1hex1hexagons1hilbert1hl71hmac1holdem1http21https1hvac1icmp1ics1incidents1inventory1invoice1ion1ios1ip1iptv1iso86011java1jql1json-ld1json-rpc1jsonl1julian-date1jupyter1keccak1keywords1kms1kubernetes1language1latex1ldap1lets-encrypt1libsodium1licences1licenses1licensing1lightning1linear-algebra1linked-data1listings1loans1local1localisation1logging1logic1mandates1mapbox1math1mathml1maxmind1maze1mbtiles1mcp1measurement-protocol1medical-imaging1meetings1meilisearch1memcached1merchant-of-record1merkle1meters1mfa1mgrs1middleware1midi1military1mmdb1mo1mockups1molar-mass1moon1morse1nat1navigation1neo4j1networks1newsletter1nfc1nginx1notebooks1oauth11oidc1omaha1on-call1onedrive1opa1open-meteo1openapi1opensearch1orbits1org-mode1osm1osrm1parquet1parsing1passkeys1passwordless1pathfinding1pbf1pgn1pgp1photography1pkce1planets1playlists1plugins1pmtiles1png1po1pods1poker1polyline1postgres1postgrest1powerpoint1probability1procedural1process1processes1productivity1profiles1projects1promql1puzzle1pxe1python1qdrant1quota1r21rabbitmq1range-requests1raster1rdf1readability1recommendations1reconciliation1recovery1recurring1refunds1remote1replication1repositories1reverse1revocation1rfc33391routers1routes1routing1rpg1sales1sandbox1sat1sca1scaling1science1screenshots1scripts1sdp1secured-keys1semantic-web1semver1sepa1serverless1services1sets1sftp1sgf1sgp41sharding1shell1simulation1sitemap1smtp1soql1space1sphinx1spreadsheet1stage1statements1static-analysis1streams1subscriptions1sudoku1sun1switzerland1sync1tap1tasks1telephony1terraform1theory1time series1timeout1timetables1timezones1toml1topojson1topology1totp1tracks1trading1transfers1transit1travel1two-factor1typesense1uart1updates1upload1upnp1ups1uptime1url1usb1utm1vectors1voip1wallet1wasm1webauthn1webrtc1wifi1wordpress1x5091xlsx1youtube1zero-copy1zip1zones1