check_certificate_chain 0.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: cd6c44ce20ed10b6e27ce10f5d4287bb1c0a793b
+  data.tar.gz: dbebf17893c6b0684e87b63e211f296061aab82e
+SHA512:
+  metadata.gz: 97ab4b9072b289007394270b85c79464e12fdfe15db9aba8491a625ac8118eb00f25f07bb92e81be89958877746b730337679aa006290f0e0fafd9b136699a8a
+  data.tar.gz: 4d69b10d286bcada52e718eb9c2f34b2befa3e58154e2426f0557aee18457e567aed29d47a042c66472b919ff43efc4ac3b1f3ff0fc0658eabc24593bf105768

data/bin/check_certificate_chain

@@ -0,0 +1,93 @@
+#!/usr/bin/env ruby
+
+require 'openssl'
+require 'socket'
+require 'uri'
+require 'colorize'
+
+module OpenSSL
+	module X509
+		class Certificate
+			def self_signed?
+				self.verify self.public_key
+			end
+		end
+	end
+end
+
+cert_store = OpenSSL::X509::Store.new
+cert_store.set_default_paths
+
+uri = URI(ARGV[0])
+uri = uri.host.nil? ? ARGV[0] : uri.host
+
+ctx = OpenSSL::SSL::SSLContext.new
+socket = TCPSocket.new(uri, 443)
+
+ssl = OpenSSL::SSL::SSLSocket.new(socket, ctx)
+ssl.hostname = uri
+
+ssl.connect
+
+chain = ssl.peer_cert_chain
+puts "---"
+puts "Certificate chain"
+chain.size.times do |index|
+	puts " #{index} s:#{chain[index].subject.to_s}"
+	puts "   i:#{chain[index].issuer.to_s}"
+end
+print "--- "
+if OpenSSL::SSL.verify_certificate_identity(chain[0], uri)
+	puts "The hostname (".green + "#{uri}".bold + ") is correctly listed in the certificate".green
+
+	puts "--- " + "The certificate will expire in ".green +
+	     "#{((chain[0].not_after - chain[0].not_before).to_i / (24 * 60 * 60)).to_s}".bold + " days.".green
+else
+	puts "None of the common names in the certificate match the name that was entered (".red +
+	     "#{uri}".bold + ").".red
+end
+puts "---"
+
+check_chain_status = true
+
+chain.each_with_index do |certificate, i|
+	subject = certificate.subject.to_s.split("CN=").last
+	puts "Common name: ".bold + "#{subject}"
+
+	sans = certificate.extensions.find {|ext| ext.oid.eql?("subjectAltName")}
+	unless sans.nil?
+		sans = sans.value.delete('DNS:')
+		puts "SANs: ".bold + sans
+	end
+	puts "Valid ".bold + "#{certificate.not_before.strftime('from %B %d, %Y')} " + "#{certificate.not_after.strftime('to %B %d, %Y')}"
+	puts "Serial Number: ".bold + certificate.serial.to_s(16)
+	puts "Signature Algorithm: ".bold + certificate.signature_algorithm
+	puts "Issuer: ".bold + certificate.issuer.to_s.split("CN=").last
+	print "--- "
+
+	if check_chain_status
+		unless chain[i+1].nil?
+			if certificate.verify chain[i+1].public_key
+				puts "chain ok".yellow
+			else
+				puts "chain broken".red
+				check_chain_status = false
+			end
+		else
+		# Check agains certificate store
+			unless certificate.self_signed?
+				if cert_store.verify certificate
+					puts "checked against os store; chain ok".yellow
+				else
+					puts "checked against os store; chain broken".red
+					chain_check_status = false
+				end
+			else
+				puts "\n"
+			end
+		end
+	else
+		puts "\n"
+	end
+	# puts "\n" if chain.size == i + 1 || check_chain_status == false
+end

metadata

@@ -0,0 +1,46 @@
+--- !ruby/object:Gem::Specification
+name: check_certificate_chain
+version: !ruby/object:Gem::Version
+  version: 0.0.0
+platform: ruby
+authors:
+- Jora Porcu
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-07-19 00:00:00.000000000 Z
+dependencies: []
+description: Make a ssl connections. Show certificates details and check certificates
+  chain.
+email: jitlogan@gmail.com
+executables:
+- check_certificate_chain
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/check_certificate_chain
+homepage: 
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.11
+signing_key: 
+specification_version: 4
+summary: SSL connection details.
+test_files: []