Local SSL/TLS cert inspection

v0.1.6

Inspect TLS certificates and keys on the local filesystem — find PEMs under a path, dump x509 details, check chain, verify private-key match, inspect PKCS#12. Read-only. Pair with `network-tls` for the remote-side view.

7 allowed by default

Pack ID

ssl-local

Vendor

emisar

linux

Actions

Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.


              openssl

Install

emisar pack install validates the pack and verifies its content hash before copying it into /etc/emisar/packs. The --hash below pins the install to the exact bytes on this page — a tampered copy is rejected. After install, reload the runner; it re-reads the catalog and advertises every action.

content hash: sha256:c13c30444dab16afb6a0740413bc35bcda00a9ebc54e139c7328067dad657009

on the runner host

sudo emisar pack install ssl-local \
  --hash sha256:c13c30444dab16afb6a0740413bc35bcda00a9ebc54e139c7328067dad657009 \
  --dest /etc/emisar/packs

# Reload so the runner re-reads the catalog:
sudo systemctl reload emisar

Actions 7 total

View on GitHub

ssl.cert_expiry exec low

openssl x509 -enddate -subject
ssl.cert_fingerprint exec low

openssl x509 -fingerprint -sha256
ssl.cert_text exec low

openssl x509 -text -noout
ssl.find_certs exec low

find *.pem *.crt *.cer under <path>
ssl.key_modulus exec low

openssl rsa -modulus | sha256
ssl.pkcs12_info exec low

openssl pkcs12 -nokeys -info
ssl.verify_chain exec low

openssl verify -CAfile <bundle> <cert>

← Back to registry

Pack reference Publish your own →