一款用于提取服务器证书的 CLI 工具
可执行文件可在 Releases 中下载。或者，你也可以使用以下方法之一安装该工具：
brew install cripbrew install hakky54/homebrew-apps/cripsudo add-apt-repository ppa:hakky554/apps && sudo apt update && sudo apt-get install crip -t 'o=LP-PPA-hakky554-apps'nix-shell -p certificate-ripper 或将 pkgs.certificate-ripper 添加到你的 configuration.nix 文件中choco install cripscoop install extras/crip最低要求：
特定操作系统的额外要求
sudo apt-get update && sudo apt-get install build-essential libz-dev zlib1g-dev -yxcode-select --installchcp 65001（UTF-8 编码）mvn clean install -Pnative-image \
&& ./target/crip print --url=https://youtube.com/
os 原生可执行二进制文件将位于目标目录下，文件名为 crip
最低要求：
mvn clean install -Pfat-jar \
&& java -jar target/crip.jar print --url=https://youtube.com/
生成的 fat jar 将位于目标目录下，文件名为 crip.jar
Usage: crip [COMMAND]
Commands:
print Prints the extracted certificates to the console
export p12 Export the extracted certificate to a PKCS12/p12 type truststore
export jks Export the extracted certificate to a JKS (Java KeyStore) type truststore
export der Export the extracted certificate to a binary form also known as DER
export pem Export the extracted certificate to a base64 encoded string also known as PEM
Usage: crip print
Prints the extracted certificates to the console
-f, --format To be printed certificate format. This option is not required. Default is human-readable.
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
Usage: crip export pkcs12
Export the extracted certificate to a PKCS12/p12 type truststore
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-p, --password TrustStore password. This option is not required. Default is changeit.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
Usage: crip export der
Export the extracted certificate to a binary form also known as DER
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-c, --combined Indicator to either combine all of the certificate into one file for a given url or export into individual files.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
Usage: crip export pem
Export the extracted certificate to a base64 encoded string also known as PEM
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-c, --combined Indicator to either combine all of the certificate into one file for a given url or export into individual files.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
--include-header Indicator to either omit or include additional information above the BEGIN statement.
Other additional options applicable for all commands
--proxy-host Proxy host
--proxy-port Proxy port
--proxy-password Password for authenticating the user for the given proxy
--proxy-user User for authenticating the user for the given proxy
-t, --timeout Amount of milliseconds till the ripping should timeout
--resolve-ca Indicator to automatically resolve the root ca. Possible options: true, false
--resolve-siblings Indicator to automatically resolve the certificates from DNS names. Possible options: true, false
--cert-type To be extracted certificate types. Available Formats: root, inter, leaf, all. Default: all
crip export pkcs12 -u=https://github.com
crip export pkcs12 \
-u=https://youtube.com \
-u=https://github.com \
-u=https://stackoverflow.com \
-u=https://facebook.com
crip export pkcs12 -u=https://github.com -d=/path/to/directory
crip print -u=https://github.com
crip print -u=https://github.com -f=pem
crip print -f=pem \
-u=https://youtube.com \
-u=https://github.com \
-u=https://stackoverflow.com \
-u=https://facebook.com
crip export pem \
-u=https://stackoverflow.com \
--proxy-host=my-host.com \
--proxy-port=1234 \
--proxy-user=foo \
--proxy-password
crip export pem -u=https://github.com --combined=true
仅在组合选项下且只指定单个 URL 时有效。
crip export pem -u=https://github.com --combined=true --destination=/path/to/export/github-chain.crt
crip export p12 -d=path/to/lib/security/cacerts -p=changeit -u=https://google.com
# Operating System trusted certificates
crip export pem -u=system
# Websocket server
crip export pem -u=wss://echo.websocket.org
# FTP server
crip export pem -u=ftps://my-drive.com:21
# SMTP server
crip export pem -u=smtps://smtp-mail.outlook.com:587
# IMAP server
crip export pem -u=imaps://outlook.office365.com:993