get_issuer_count: Retrieve certificate issuer count

In hrbrmstr/tlsobs: Tools to Work with the 'Mozilla' 'TLS' Observatory 'API'

Description

Retrieve the count of end-entity certificates that chain to the specified certificate. This is used to evaluate weight of a given issuer in the web pki

Usage

get_issuer_count(id, sha256, host = get_obs_host(), timeout = 60)

Arguments

id	the ID of the certificate to start the path at
sha256	the hexadecimal checksum of the DER certificate (only if id is not provided)
host	if you host your own instance of the TLS Observatory, either specify the hostname here (not advised) or set the envrionment variable TLS_OBSERVATORY_HOST to the hostname (preferred). If no environment variable is set the default ("tls-observatory.services.mozilla.com") will be used.
timeout	defaults to 60, but most calls to this API enpoint come back quickly. Adjust as necessary (ie. when the server is under load this might need to be increased).

Value

a list containing the certificate itself under issuer and the count of end-entity certs under eecount.

Note

use either id or sha256. If both are provided, id gets preference.

References

https://github.com/mozilla/tls-observatory#get-apiv1issuereecount

Examples

str(get_issuer_count(1))

hrbrmstr/tlsobs documentation built on May 20, 2019, 4:06 p.m.