IDigiTrust SSL Toolkit
Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.
Sollte ich dies verwenden
Qualität und Sicherheit
Befunde (15)
- LOWin cert.decode
- LOWin convert.run
- LOWin csr.decode
- LOWin csr.generate
- LOWin dcv.check
- LOWin dcv.list_cas
- LOWin inspect.run
- LOWin cert.decode
- LOWin cert.match
- LOWin convert.run
Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.
Kontextkosten
Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.
Installieren
Installation mit einem Klick
Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:
{
"mcpServers": {
"ssl-toolkit-mcp": {
"url": "https://tools.idigitrust.com/api/v1/mcp"
}
}
}Remote-Endpunkte
https://tools.idigitrust.com/api/v1/mcpstreamable-httpWas es kann
Tool-Inventar
Tools (8)
⚪cert.decode(cert, chain, check_revocation)
解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL,含交叉证书)+ 上传链时验证匹配关系并识别根证书。
Eingabe-Schema
{
"type": "object",
"properties": {
"cert": {
"type": "string",
"description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
},
"chain": {
"type": "string",
"description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
},
"check_revocation": {
"type": "boolean",
"description": "是否执行整链吊销检查(OCSP / CRL,含交叉证书),默认 true"
}
},
"required": [
"cert"
]
}⚪cert.match(mode, cert, key, csr, password)
证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。
Eingabe-Schema
{
"type": "object",
"properties": {
"mode": {
"type": "string",
"enum": [
"cert-key",
"cert-csr",
"key-csr"
]
},
"cert": {
"type": "string",
"description": "证书 PEM"
},
"key": {
"type": "string",
"description": "私钥 PEM"
},
"csr": {
"type": "string",
"description": "CSR PEM"
},
"password": {
"type": "string",
"description": "加密私钥的密码(可选)"
}
},
"required": [
"mode"
]
}⚪convert.run(source_kind, target_kind, cert_pem, key_pem, chain_pem, ...)
证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。
Eingabe-Schema
{
"type": "object",
"properties": {
"source_kind": {
"type": "string",
"enum": [
"pem",
"p12",
"jks"
]
},
"target_kind": {
"type": "string",
"enum": [
"pem",
"p12",
"jks"
]
},
"cert_pem": {
"type": "string",
"description": "PEM 源:证书"
},
"key_pem": {
"type": "string",
"description": "PEM 源:私钥"
},
"chain_pem": {
"type": "string",
"description": "PEM 源:链(可选)"
},
"source_blob_base64": {
"type": "string",
"description": "P12/JKS 源 base64"
},
"source_password": {
"type": "string"
},
"source_alias": {
"type": "string",
"description": "JKS 别名"
},
"target_password": {
"type": "string",
"description": "P12/JKS 目标必填"
},
"target_alias": {
"type": "string",
"description": "目标别名,P12/PFX 默认 server,JKS 默认 tomcat"
},
"enable_aia_fill": {
"type": "boolean",
"description": "源不带链时尝试 AIA 拉取"
}
},
"required": [
"source_kind",
"target_kind"
]
}⚪csr.decode(csr)
解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。
Eingabe-Schema
{
"type": "object",
"properties": {
"csr": {
"type": "string",
"description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
}
},
"required": [
"csr"
]
}⚪csr.generate(subject, algorithm, hash_alg)
生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。
Eingabe-Schema
{
"type": "object",
"properties": {
"subject": {
"type": "object",
"required": [
"common_name",
"country"
],
"properties": {
"common_name": {
"type": "string",
"description": "CN,支持中文域名及通配符,自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
},
"organization": {
"type": "string",
"description": "O 组织名(可选,DV 证书通常不需要)"
},
"country": {
"type": "string",
"description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
},
"province": {
"type": "string",
"description": "ST 省/州(可选)"
},
"locality": {
"type": "string",
"description": "L 城市(可选)"
},
"san": {
"type": "array",
"items": {
"type": "string"
},
"description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
}
}
},
"algorithm": {
"type": "string",
"enum": [
"RSA-2048",
"RSA-3072",
"RSA-4096",
"EC-P256",
"EC-P384",
"EC-P521"
]
},
"hash_alg": {
"type": "string",
"enum": [
"SHA-256",
"SHA-384",
"SHA-512"
],
"description": "RSA 适用;ECC 由曲线决定"
}
},
"required": [
"subject",
"algorithm"
]
}⚪dcv.check(mode, domain, file_url, record_type, expected_token, ...)
DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。
Eingabe-Schema
{
"type": "object",
"properties": {
"mode": {
"type": "string",
"enum": [
"dns",
"http"
]
},
"domain": {
"type": "string",
"description": "DNS 模式必填:主机记录名"
},
"file_url": {
"type": "string",
"description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
},
"record_type": {
"type": "string",
"enum": [
"txt",
"cname"
],
"description": "DNS 模式记录类型,默认 txt"
},
"expected_token": {
"type": "string",
"description": "可选;粘贴期望值启用字节级匹配"
},
"target_ca": {
"type": "string",
"description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
}
},
"required": [
"mode"
]
}⚪dcv.list_cas
列出已支持的 CA(用于挑战路径推导与 CAA 比对)。
Eingabe-Schema
{
"type": "object",
"properties": {}
}⚪inspect.run(host, port, force)
HTTPS 体检:常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL(含交叉证书)、协议套件及评级。同步等待全部完成。
Eingabe-Schema
{
"type": "object",
"properties": {
"host": {
"type": "string",
"description": "FQDN,可带 :port"
},
"port": {
"type": "integer",
"description": "可选;默认从 host 解析或回退 443"
},
"force": {
"type": "boolean",
"description": "true 跳过缓存,强制重扫"
}
},
"required": [
"host"
]
}Community
Nachweis