certgraph 0.1.0__tar.gz

certgraph-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Chris Adshead
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

certgraph-0.1.0/PKG-INFO

@@ -0,0 +1,42 @@
+Metadata-Version: 2.4
+Name: certgraph
+Version: 0.1.0
+Summary: Utility for exploring and mapping X509 certificate chains.
+Author: Chris Adshead
+License: MIT License
+        
+        Copyright (c) 2026 Chris Adshead
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography
+Requires-Dist: networkx
+Requires-Dist: pydot
+Requires-Dist: rapidfuzz
+Provides-Extra: dev
+Requires-Dist: black; extra == "dev"
+Requires-Dist: pytest; extra == "dev"
+Requires-Dist: pytest-cov; extra == "dev"
+Dynamic: license-file
+
+# certgraph
+Python package for displaying X509 certificate chains.

certgraph-0.1.0/README.md

@@ -0,0 +1,2 @@
+# certgraph
+Python package for displaying X509 certificate chains.

certgraph-0.1.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+requires = ["setuptools>=68.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "certgraph"
+version = "0.1.0"
+description = "Utility for exploring and mapping X509 certificate chains."
+readme = "README.md"
+requires-python = ">=3.12"
+license = { file = "LICENSE" }
+authors = [
+    { name = "Chris Adshead" },
+]
+dependencies = [
+    "cryptography",
+    "networkx",
+    "pydot",
+    "rapidfuzz",
+]
+
+[project.optional-dependencies]
+dev = [
+    "black",
+    "pytest",
+    "pytest-cov",
+]
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

certgraph-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

certgraph-0.1.0/src/certgraph/__init__.py

@@ -0,0 +1,5 @@
+"""certgraph: Utility for exploring and mapping X509 certificate chains."""
+
+from certgraph.certgraph import certgraph
+
+__all__ = ["certgraph"]

certgraph-0.1.0/src/certgraph/certgraph.py

@@ -0,0 +1,109 @@
+from cryptography import x509
+from cryptography.hazmat.primitives import hashes
+import networkx as nx
+from rapidfuzz import fuzz
+
+
+class certgraph:
+    def __init__(self) -> None:
+        self._certlist: set[x509.Certificate] = []
+        self._graph = nx.DiGraph()
+
+    def import_certificates(
+        self,
+        certificates: (
+            x509.Certificate | str | bytes | list[x509.Certificate | str | bytes]
+        ),
+        pem_encoding: str = "utf-8",
+    ) -> certgraph:
+        new_certs: set[x509.Certificate] = []
+
+        # If there's only a non-list object being handing in, turn it into an array to keep the same iteration code
+        for i, cert in enumerate(
+            certificates if isinstance(certificates, list) else [certificates]
+        ):
+            if isinstance(cert, x509.Certificate):
+                # No conversion neccessary
+                new_certs.append(cert)
+            elif isinstance(cert, str):
+                # PEM encoded
+                pem_certs = x509.load_pem_x509_certificates(cert.encode(pem_encoding))
+                new_certs.extend(pem_certs)
+            elif isinstance(cert, bytes):
+                # DER encoded
+                der_cert = x509.load_der_x509_certificate(cert)
+                new_certs.append(der_cert)
+            else:
+                raise TypeError(
+                    f"Cannot import certificate {i} from data type {type(cert)}"
+                )
+
+        self._certlist.extend(new_certs)
+        self._graph = self._generate_graph(self._certlist)
+
+        return self
+
+    def _generate_graph(self, certificates: set[x509.Certificate]) -> nx.DiGraph:
+        G = nx.DiGraph()
+
+        # Pass 1: add nodes and build a subject_dn -> fingerprint index
+        subject_index: dict[str, list[str]] = {}
+        for cert in certificates:
+            fingerprint = cert.fingerprint(hashes.SHA256()).hex()
+            G.add_node(fingerprint, certificate=cert)
+
+            subject_dn = cert.subject.rfc4514_string()
+            subject_index.setdefault(subject_dn, []).append(fingerprint)
+
+        # Pass 2: add edges using the index
+        for fingerprint, data in G.nodes(data=True):
+            issuer_dn = data["certificate"].issuer.rfc4514_string()
+
+            for issuer_fingerprint in subject_index.get(issuer_dn, []):
+                G.add_edge(issuer_fingerprint, fingerprint)
+
+        return G
+
+    def report_fingerprint_edges(self) -> list[str]:
+        return [f"{edge[0][:8]} -> {edge[1][:8]}" for edge in self._graph.edges()]
+
+    def export_dot(self, format: str = "svg") -> str:
+        allowed_types = ["svg", "png"]
+
+        if format not in allowed_types:
+            raise ValueError(
+                f"Cannot export dot graph of type {format} - must be one of {allowed_types}"
+            )
+
+        dot_graph = nx.DiGraph()
+
+        for fingerprint, data in self._graph.nodes(data=True):
+            label = data["certificate"].subject.rfc4514_string()
+            dot_graph.add_node(fingerprint, label=label)
+        dot_graph.add_edges_from(self._graph.edges())
+
+        nx.drawing.nx_pydot.write_dot(dot_graph, "./test_out.dot")
+
+        return "dot"
+
+    def clear(self) -> certgraph:
+        self._certlist.clear()
+        self._graph.clear()
+        return self
+
+    def fingerprint_from_distinguished_name(self, dn: str, cutoff: int = 0) -> str:
+        # Evaluate the nodes
+        nodes: list[tuple[str, dict]] = list(self._graph.nodes(data=True))
+
+        # Sort using a fuzzy-search
+        ranked = sorted(
+            nodes,
+            key=lambda t: fuzz.ratio(
+                dn, t[1]["certificate"].subject.rfc4514_string(), score_cutoff=cutoff
+            )
+        )
+
+        if not ranked:
+            return None
+
+        return ranked[-1][0]

certgraph-0.1.0/src/certgraph.egg-info/PKG-INFO

@@ -0,0 +1,42 @@
+Metadata-Version: 2.4
+Name: certgraph
+Version: 0.1.0
+Summary: Utility for exploring and mapping X509 certificate chains.
+Author: Chris Adshead
+License: MIT License
+        
+        Copyright (c) 2026 Chris Adshead
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography
+Requires-Dist: networkx
+Requires-Dist: pydot
+Requires-Dist: rapidfuzz
+Provides-Extra: dev
+Requires-Dist: black; extra == "dev"
+Requires-Dist: pytest; extra == "dev"
+Requires-Dist: pytest-cov; extra == "dev"
+Dynamic: license-file
+
+# certgraph
+Python package for displaying X509 certificate chains.

certgraph-0.1.0/src/certgraph.egg-info/SOURCES.txt

@@ -0,0 +1,10 @@
+LICENSE
+README.md
+pyproject.toml
+src/certgraph/__init__.py
+src/certgraph/certgraph.py
+src/certgraph.egg-info/PKG-INFO
+src/certgraph.egg-info/SOURCES.txt
+src/certgraph.egg-info/dependency_links.txt
+src/certgraph.egg-info/requires.txt
+src/certgraph.egg-info/top_level.txt

certgraph-0.1.0/src/certgraph.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

certgraph-0.1.0/src/certgraph.egg-info/requires.txt

@@ -0,0 +1,9 @@
+cryptography
+networkx
+pydot
+rapidfuzz
+
+[dev]
+black
+pytest
+pytest-cov

certgraph-0.1.0/src/certgraph.egg-info/top_level.txt

@@ -0,0 +1 @@
+certgraph