craine
Joined 10 years ago
Karma
21
Submissions
6
Member since
Mar 11
[ my public key: https://keybase.io/craine; my proof: https://keybase.io/craine/sigs/bit6TRV4dcjUF3PIABVlBtvtM6P7a4a4MJd81H2vZy8 ]
View on Hacker NewsJoined 10 years ago
I've also worked places that used multiple CAs, and that makes it more difficult to manage. This at least can pull the info in based on what the server is actually using, and puts everything on one screen, regardless of the CA it came from.
I use a node module to scrape the peer certificate info, and then dump it into a file that a web page picks up. It's not real-time, out of concern for too many people hitting or reloading the page and kicking off too many connection attempts at once.
An example is here: https://craine.gitlab.io/tls-dashboard/