âšī¸ About NationalIT Certificate Portal
đ¯ Purpose
This web application provides a secure and convenient way to distribute NationalIT SSL certificates across all your devices. It allows users to easily download and install certificate files with device-specific instructions, ensuring secure connectivity to NationalIT services.
đ Supported Certificate Formats
- .pem - Privacy Enhanced Mail (Base64 encoded)
- .crt - Certificate file (usually Base64 encoded)
- .cer - Certificate file (can be DER or Base64)
- .der - Distinguished Encoding Rules (binary)
- .p12/.pfx - PKCS#12 format (contains certificate and private key)
- .key - Private key file
- .p7b/.p7c - PKCS#7 format (certificate chain)
đ Security Features
- Secure filename validation to prevent directory traversal attacks
- File type validation to ensure only certificate files are served
- Safe file serving with proper MIME type detection
- Read-only access - no file upload functionality through web interface
- Error handling to prevent information disclosure
đ Features
- File Listing: View all available certificate files with details
- Secure Downloads: Download certificates with proper file handling
- Certificate Viewing: View text-based certificates (.pem, .crt, .cer, .key) in the browser
- Format Detection: Automatic recognition of certificate file types
- Responsive Design: Works on desktop and mobile devices
- File Information: Display file sizes and format descriptions
đ Usage Instructions
- Select your device type from the main page (iOS, Android, Windows, etc.)
- Download the appropriate certificate for your device
- Follow the device-specific installation instructions provided
- Verify the certificate is properly installed and trusted
- Contact NationalIT support if you need assistance
â ī¸ Important Security Notes
- Network Access: Only deploy this server on trusted networks
- Certificate Security: Be cautious about exposing private keys (.key files)
- Access Control: Consider implementing additional authentication if needed
- HTTPS: Use HTTPS in production to protect certificate downloads
- Regular Updates: Keep the server software updated for security
đ ī¸ Technical Information
Framework: Flask (Python)
Server: Development server (use production WSGI server in production)
Port: 5000 (default)
Host: 0.0.0.0 (accessible from network)