1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
use std::{fs, io::Write, net::TcpStream, sync::Arc};
use rustls::{pki_types::ServerName, ClientConfig, ClientConnection, RootCertStore, Stream};
use webpki_root_certs::TLS_SERVER_ROOT_CERTS;
fn main() -> Result<(), Box<dyn std::error::Error>> {
let mut roots = RootCertStore::empty();
let (_, ignored) = roots.add_parsable_certificates(TLS_SERVER_ROOT_CERTS.iter().cloned());
assert_eq!(ignored, 0, "{ignored} root certificates were ignored");
let config = Arc::new(
ClientConfig::builder()
.with_root_certificates(roots)
.with_no_client_auth(),
);
for &host in HOSTS {
let server_name = ServerName::try_from(host)?;
let mut conn = ClientConnection::new(config.clone(), server_name)?;
let mut sock = TcpStream::connect((host, 443))?;
let mut stream = Stream::new(&mut conn, &mut sock);
eprintln!("connecting to {host}...");
if let Err(err) = stream.write_all(b"GET / HTTP/1.1\r\n\r\n") {
eprintln!("failed to write to {host}: {err}");
}
let Some(certs) = conn.peer_certificates() else {
eprintln!("no certificates received for {host}");
continue;
};
for (i, der) in certs.iter().enumerate() {
let host_name = host.replace('.', "_");
let fname = format!(
"{}/src/tests/verification_real_world/{host_name}_valid_{}.crt",
env!("CARGO_MANIFEST_DIR"),
i + 1
);
fs::write(&fname, der.as_ref())?;
eprintln!("wrote certificate to {fname}");
}
}
Ok(())
}
const HOSTS: &[&str] = &["letsencrypt.org"];
|
