â„šī¸ About NationalIT Certificate Portal

đŸŽ¯ Purpose

This web application provides a secure and convenient way to distribute NationalIT SSL certificates across all your devices. It allows users to easily download and install certificate files with device-specific instructions, ensuring secure connectivity to NationalIT services.

📁 Supported Certificate Formats

  • .pem - Privacy Enhanced Mail (Base64 encoded)
  • .crt - Certificate file (usually Base64 encoded)
  • .cer - Certificate file (can be DER or Base64)
  • .der - Distinguished Encoding Rules (binary)
  • .p12/.pfx - PKCS#12 format (contains certificate and private key)
  • .key - Private key file
  • .p7b/.p7c - PKCS#7 format (certificate chain)

🔒 Security Features

  • Secure filename validation to prevent directory traversal attacks
  • File type validation to ensure only certificate files are served
  • Safe file serving with proper MIME type detection
  • Read-only access - no file upload functionality through web interface
  • Error handling to prevent information disclosure

🚀 Features

  • File Listing: View all available certificate files with details
  • Secure Downloads: Download certificates with proper file handling
  • Certificate Viewing: View text-based certificates (.pem, .crt, .cer, .key) in the browser
  • Format Detection: Automatic recognition of certificate file types
  • Responsive Design: Works on desktop and mobile devices
  • File Information: Display file sizes and format descriptions

📖 Usage Instructions

  1. Select your device type from the main page (iOS, Android, Windows, etc.)
  2. Download the appropriate certificate for your device
  3. Follow the device-specific installation instructions provided
  4. Verify the certificate is properly installed and trusted
  5. Contact NationalIT support if you need assistance

âš ī¸ Important Security Notes

  • Network Access: Only deploy this server on trusted networks
  • Certificate Security: Be cautious about exposing private keys (.key files)
  • Access Control: Consider implementing additional authentication if needed
  • HTTPS: Use HTTPS in production to protect certificate downloads
  • Regular Updates: Keep the server software updated for security

đŸ› ī¸ Technical Information

Framework: Flask (Python)

Server: Development server (use production WSGI server in production)

Port: 5000 (default)

Host: 0.0.0.0 (accessible from network)