github.com/nhalstead/ssl-fingerprint

SSL Fingerprint (sprint)

This cli application written in go will connect to the given domain and return the md5/sha1/sha256/sha512 fingerprint formatted appropriately.

Simple, Fast, Easy

Why?

The main purpose of this was for debugging of SSL certs but this package can be used in some automation tasks like cert pinning or validation.

This is a CLI tool and a package.

How to use the Package

Add the following line to import the package and start using it!

package main

import (
	"fmt"
	// Needed to be imported to work
	"github.com/nhalstead/sprint"
)

func main() {
	test, _ := sprint.GetFingerprint("google.com", false)

	fmt.Println("Sha256 Fingerprint of google.com: ", test.SHA256)
}

How to use the CLI

sprint host [domain] -1

To use SHA256 or SHA512 simply use the -2 (or --sha-256) and -5 (or --sha-512) flags respectively.

sprint host [domain] -2

sprint host [domain] -5

Example Usage

sprint host google.com -1

F0:48:7A:59:65:34:33:F8:A1:92:C6:C4:FB:9A:CC:C5:AD:0C:B3:E2

Advanced Usage

If in use for bash scripts you can use sprint match. Sprint Match will fetch the fingerprint and return a status using the exit codes.

A Non-zero exit code means that it has failed the check or failed to connect during the process.

This makes it simple to implement a method of cert pinning without the need to use other languages with extra libraries.

Help (-h / --help)

Usage:
  sprint [command]

Available Commands:
  completion  generate the autocompletion script for the specified shell
  help        Help about any command
  host        Get ssl fingerprint of a URL
  match       Get ssl fingerprint of a URL and check if it matches the given fqdn or ip

Flags:
  -h, --help   help for sprint

Usage:
  sprint host [fqdn or ip] [flags]

Flags:
  -d, --disable-nth        disable Nth separator
  -h, --help               help for host
  -m, --md5                return md5 fingerprint
  -s, --separator string   separator between many hashes (default ",")
  -1, --sha-1              return sha1 fingerprint
  -2, --sha-256            return sha256 fingerprint
  -5, --sha-512            return sha512 fingerprint

Usage:
  sprint match [fqdn or ip] [fingerprint] [flags]

Flags:
  -h, --help   help for match