Support for inspecting multiple certs or files

[maxxedev]

What would you like to be added

Add support for inspecting multiple certificates in one file and/or multiple files each of which may contain multiple certificates.

Example:

// multiple certificates in one file
$ step certificate inspect --bundle --format pem https://www.google.com > certs.txt
$ step certificate inspect certs.txt
<shows only one cert>

// multiple input files
$ step certificate inspect --bundle --format pem https://www.duckduckgo.com > certs-2.txt
$ step certificate inspect certs.txt certs-2.txt
too many positional arguments were provided in 'step certificate inspect <crt_file>'

Why this is needed

Convenience in inspecting pem files

[maraino]

Hi @maxxedev, why not just:

cat leaf.crt $(step path)/certs/root_ca.crt | step certificate inspect --bundle

[maxxedev]

Ah, ok, I have to pass in --bundle

step certificate inspect --bundle multiple-certs.txt
cat multiple-certs.txt | step certificate inspect --bundle -

[dopey]

Hey @maxxedev, I'm going to close this issue. But if you feel that there are unaddressed or unresolved questions please let us know and we'll reopen.

[maxxedev]

I'd prefer to see the tool be enhanced so that it's more intuitive and convenient.
But closing is ok too; not a big inconvenience.

[dopey]

Hey @maxxedev I think I'm a bit confused on which part you'd like to be more intuitive. In the first example you were missing --bundle, so I'm guessing you're talking about the second example?

step certificate inspect foo1.crt foo2.crt

You'd like to be able to pass multiple files to inspect. We briefly discussed this yesterday and we didn't really see the value add.

What's the use case here? If you're inspecting multiple cert files is this something that you're scripting to then parse the output?

[maxxedev]

Use-case is sometimes multiple certs are delivered in individual files

// easier
step certificate inspect leaf.crt intermediate.crt

... which could just as easily be done with

// little more difficult
cat leaf.crt intermediate.crt | step certificate inspect --bundle - 

It's ok if you don't see the value add :)

[dopey]

That's fair. We have an "open source triage" meeting once a week. So I'll bring this back up at the next one. But, as you've probably noted, we tend to favor shell script niceties when it means we don't have to any work ;p

[dopey]

Upon further discussion, we'd be happy to accept a PR for this if anyone from the community feels like contributing.