fix: support parsing of openssl specific trusted cert formats

ribbybibby / ssl_exporter

Exports Prometheus metrics for TLS certificates

Apache License 2.0

504 stars 95 forks source link

fix: support parsing of openssl specific trusted cert formats #142

Closed MisterVVP closed 2 months ago

MisterVVP commented 11 months ago

There is an openssl specific format, which includes additional trust rules in cert itself. Such certificates have different block.Type "TRUSTED CERTIFICATE" instead of "CERTIFICATE". Would be nice to support this in exporter.

More details below:

https://stackoverflow.com/questions/55447752/what-does-begin-trusted-certificate-in-a-certificate-mean
https://www.openssl.org/docs/man3.0/man1/openssl-verification-options.html

ribbybibby commented 3 months ago

Thank you for the PR @MisterVVP and sorry for the very slow response. This looks good but could you add a test for this?