CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/py-pnu-certwatch 1.0.3

Watch X509 certificates expiration dates

Port info

Maintainer
hubert.tournier@gmail.com
Packages
latest: 1.0.3
Upstream
up to date
Last update
to 1.0.3 · 4ede5b61f2
Quarterly
2026Q4: 1.0.3
WWW
https://github.com/HubTou/certwatch
Links
cgit · VuXML

Install

Package
# pkg install py312-pnu-certwatch
installs 1.0.3 from latest; from quarterly (2026Q4) 1.0.3
Port
# cd /usr/ports/security/py-pnu-certwatch && make install clean
Size
32 KiB download · 143 KiB installed
Depends on
devel/py-pnu-libpnu 1.3.0, devel/py-prettytable 3.18.0, lang/python312 3.12.15, misc/py-tqdm 4.70.1, security/py-cryptography 50.0.1_1,1, textproc/py-openpyxl 3.1.5
License
BSD3CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.31.0.3–
FreeBSD 151.0.31.0.3–
FreeBSD 141.0.31.0.31.0.3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.31.0.3–
FreeBSD 141.0.31.0.31.0.3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.0.3.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (1)

Philippe Audeoud (jadawin) · 1.0.3
security/py-pnu-certwatch: new port

The certwatch utility monitors X509 certificates expiration dates by
processing one or more data files containing lists of hostnames with
optional port numbers.

It's mainly used to check the expiration date of HTTPS certificates
(which is the default target when the port number is not indicated),
but the tool is protocol-agnostic and can "talk" to any SNI-aware
(Server Name Information) SSL/TLS server (smtps, imaps, ldaps, etc.)
without making too much assumptions on the correctness of servers
certificates.

The certificates can be saved to a specified directory for further
analysis with other tools (such as OpenSSL).

The tool's results are presented as text tables.

The main one is the list of certificates successfully fetched, ordered
by expiration date. This list can be filtered to only show
certificates expired or expiring within the specified number of days.

The second table is the sorted list of hostnames / hostports where
certificates couldn't be fetched, with our best attempts to identify
the reason why.

Two additional tables can be generated in order to print the common
names and alternate names unmentioned in your input data files.

Finally, for user convenience, all these reports can be generated in a
single multi-tabs Excel workbook.

PR:	277970
Approved by:	maintainer, bapt (mentor)
4ede5b61f2