Audit Admin Certificate Expiration

package           : tis-audit-admin-cert-expiration
version           : 1-0
architecture      : all
section           : base
priority          : optional
name              : Audit Admin Certificate Expiration
categories        : Security
maintainer        : Bertrand Lemoigne, WAPT Team
description       : Audit certificate expiration
depends           : 
conflicts         : 
maturity          : PROD
locale            : 
target_os         : windows
min_wapt_version  : 
sources           : 
installed_size    : 
impacted_process  : 
description_fr    : 
description_pl    : 
description_de    : 
description_es    : 
description_pt    : 
description_it    : 
description_nl    : 
description_ru    : 
audit_schedule    : 
editor            : 
keywords          : 
licence           : 
homepage          : 
package_uuid      : f593bd72-0f3b-4218-9f4c-a04946dc6b7b
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 
max_os_version    : 
icon_sha256sum    : 9420721210f5d9c50c9e35c9fdbf0a088b30e165df8311c5f2176ce60e122475
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature_date    : 2025-12-10T14:00:21.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature         : uXlnEQD53pDx4Ms0Kz1G11oiNLPQyL2mQTpCQH/6ItXmBPqejB1hfWBOqobaqvKliRNlss9+bqHyoc3y4zVbDqTxBNOilRZjDdOrwM2379kUXrQvXirzCZ1jlFvxagrwwny0mUI4JFG2d30lbauSVPP8L5E4ZKE25jWT+G9tCfYoiNc4cRGjCic9OI/6mIhEciFED3U+PdV0Hi0nU7Bub9wW6QoNqvX63JK/Z5Av14EzA2+YSlnFA2PvfW2ijslCUDRO9yfTOkFDeXGFrCTWFn602O7sXH55GCf20GyhswdFnEJsJNNc3V7xxB/dJK1hiRFdAsRE+eZYt+tUPDuPkQ==

# -*- coding: utf-8 -*-
from setuphelpers import *
from waptcrypto import SSLCertificate
import time
from datetime import *
import ctypes
import sys
import platform

def install():
    pass


'''Uncomment session_setup() block if you want to display popups at session logon'''


##def session_setup():
##
##    #If needed, change the certificate directory to monitor:
##    cert_list = glob.glob(r'C:\Users\*\private\*.crt')
##
##    for cert in cert_list:
##        date_diff = date_diff = SSLCertificate(cert).not_after - datetime.now(timezone.utc)
##        if date_diff <= timedelta(days=0):
##            message_box('WAPT Administrators Certificate Expiration ',f'certificate {SSLCertificate(cert).cn} has expired')
##        elif date_diff < timedelta(days=15):
##            message_box('WAPT Administrators Certificate Expiration ',f'certificate {SSLCertificate(cert).cn} will expire soon')
##    return "RERUN"

def audit():

    expired_cert_list = []
    soon_expired_cert_list = []
    cert_list = glob.glob(r'C:\Users\*\private\*.crt')
    for cert in cert_list:
        date_diff = SSLCertificate(cert).not_after - datetime.now(timezone.utc)
        if date_diff <= timedelta(days=0):
            expired_cert_list.append(cert)
        if date_diff < timedelta(days=15):
            soon_expired_cert_list.append(cert)

    for cert in expired_cert_list:
            print(f'{cert} has expired')
    for cert in soon_expired_cert_list:
            print(f'{cert} will expire soon')

    if len(expired_cert_list) > 0:
        return "ERROR"
    elif len(soon_expired_cert_list) > 0:
        return "WARNING"
    else:
        return "OK"


def message_box(title, text, style=0):
    if platform.python_version_tuple()[0] == "3":
        import importlib

        importlib.reload(sys)
    else:
        reload(sys)
        sys.setdefaultencoding("utf-8")

    MB_OK = 0
    MB_OKCANCEL = 1
    MB_YESNOCANCEL = 3
    MB_YESNO = 4
    ctypes.windll.user32.MessageBoxW(0, "%s" % text, "%s" % title, style)
    return

38d056ab130f7bf7c481c12636a4e9959de36561d3dfcbe54c6e3571bc0c1dc3 : WAPT/certificate.crt
2112b2070068eb0769d9d3cb8074eb2c4c25ad8f33a0fa5acfc4e9473a47c55f : WAPT/control
9420721210f5d9c50c9e35c9fdbf0a088b30e165df8311c5f2176ce60e122475 : WAPT/icon.png
39f11ca3efd3e4c4ad37206748d63fba1c3fc049376e0ccdebd6d1619804b761 : luti.json
4a40f941aeeabd185cccd2c4cc8dd8444fb98a0ab81e28df8e8abb540df7e39e : setup.py