check_certificate_chain 0.0.1 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: fa3257af80b1329e6fa350c5b9b19d07ede6227e
-  data.tar.gz: 45fe2a3e23743cf5c1a5158819933cdda7225de7
+  metadata.gz: 5e249541543f17379be14e497d060101e31454cf
+  data.tar.gz: 8d667a7f31a552b209daf3f56ff9df2ffaf648bd
 SHA512:
-  metadata.gz: 9d0887987dd83af140c12fc8df88c51796fc32deeabfe6dc64570d01dfd1c1787690107e82955004db8e7adf1ee3fbcc63d39c31138b4e3e54f453f5d1401887
-  data.tar.gz: bbf48d000136d972822fc836d38748cf13a815f9b98c53b9f78a6a8c4113cbdc2da4627026affb1d4bebabca7ddff9006d8bbf0b72a018aaf4926161b69d9e31
+  metadata.gz: 4dd6caf84eca88a2f7c138abac89b37b5a9f445eb2b25994e2a369ec336f8a4f24a2d84588920610e954d24dd80e51a06e80ead15209e2ad5397da6cc2749c90
+  data.tar.gz: 3c4ce2be1cd2670102bebe00a3c740f0f07a132738a24d786c74e055624aa85b2ae555981167ea3f7042ac9f9d11a4779120dd4ec2c81d23d6c534f7100556dd

data/bin/check_certificate_chain

@@ -1,9 +1,11 @@
 #!/usr/bin/env ruby
 
+require 'uri'
 require 'openssl'
 require 'socket'
-require 'uri'
-require 'colorize'
+
+uri = URI(ARGV[0])
+uri = uri.host.nil? ? ARGV[0] : uri.host
 
 module OpenSSL
 	module X509
@@ -18,10 +20,8 @@ end
 cert_store = OpenSSL::X509::Store.new
 cert_store.set_default_paths
 
-uri = URI(ARGV[0])
-uri = uri.host.nil? ? ARGV[0] : uri.host
-
 ctx = OpenSSL::SSL::SSLContext.new
+
 socket = TCPSocket.new(uri, 443)
 
 ssl = OpenSSL::SSL::SSLSocket.new(socket, ctx)
@@ -30,64 +30,74 @@ ssl.hostname = uri
 ssl.connect
 
 chain = ssl.peer_cert_chain
-puts "---"
-puts "Certificate chain"
-chain.size.times do |index|
-	puts " #{index} s:#{chain[index].subject.to_s}"
-	puts "   i:#{chain[index].issuer.to_s}"
-end
-print "--- "
-if OpenSSL::SSL.verify_certificate_identity(chain[0], uri)
-	puts "The hostname (".green + "#{uri}".bold + ") is correctly listed in the certificate".green
+certificate = chain.first
+
+output = {}
+output[:header] = "--- Certificate chain"
+output[:hostname] = ""
+output[:short] = ""
+output[:long] = ""
 
-	puts "--- " + "The certificate will expire in ".green +
-	     "#{((chain[0].not_after - chain[0].not_before).to_i / (24 * 60 * 60)).to_s}".bold + " days.".green
+if OpenSSL::SSL.verify_certificate_identity(certificate, uri)
+	output[:hostname] << "The hostname #{uri} is correctly listed in the certificate\n"
+
+	output[:hostname] << "--- The certificate will expire in " +
+	((certificate.not_after - certificate.not_before).to_i / (24 * 60 * 60)).to_s + " days.\n"
 else
-	puts "None of the common names in the certificate match the name that was entered (".red +
-	     "#{uri}".bold + ").".red
+	output[:hostname] << "None of the common names in the certificate match the name that was enterred " +
+	"(#{uri})\n---\n"				
 end
-puts "---"
 
 check_chain_status = true
 
-chain.each_with_index do |certificate, i|
-	subject = certificate.subject.to_s.split("CN=").last
-	puts "Common name: ".bold + "#{subject}"
+chain.each_with_index do |cert, i|
+	output[:short] << "#{i} s:#{chain[i].subject.to_s}\n" +
+			  "  i:#{chain[i].issuer.to_s}\n"
+
+	output[:short] << "---\n" if i.eql?(chain.size - 1)
 
-	sans = certificate.extensions.find {|ext| ext.oid.eql?("subjectAltName")}
+	subject = cert.subject.to_s.split("CN=").last
+	output[:long] << "Common name: #{subject}\n"
+
+	sans = cert.extensions.find {|ext| ext.oid.eql?("subjectAltName")}
 	unless sans.nil?
-		sans = sans.value.delete('DNS:')
-		puts "SANs: ".bold + sans
+		sans = sans.value.delete("DNS:")
+		output[:long] << "SANs: #{sans}\n"
 	end
-	puts "Valid ".bold + "#{certificate.not_before.strftime('from %B %d, %Y')} " + "#{certificate.not_after.strftime('to %B %d, %Y')}"
-	puts "Serial Number: ".bold + certificate.serial.to_s(16)
-	puts "Signature Algorithm: ".bold + certificate.signature_algorithm
-	puts "Issuer: ".bold + certificate.issuer.to_s.split("CN=").last
-	print "--- "
+
+	output[:long] << "Valid #{cert.not_before.strftime('from %B %d, %Y')} " +
+			 "#{cert.not_after.strftime('to %B %d, %Y')}\n"
+	output[:long] << "Serial Number: #{cert.serial.to_s(16)}\n"
+	output[:long] << "Signature Algorithm: #{cert.signature_algorithm}\n"
+	output[:long] << "Issuer: #{cert.issuer.to_s.split("CN=").last}\n"
+
+	output[:long] << "--- "
 
 	if check_chain_status
 		unless chain[i+1].nil?
-			if certificate.verify chain[i+1].public_key
-				puts "chain ok".yellow
+			if cert.verify chain[i+1].public_key
+				output[:long] << "chain ok\n"
 			else
-				puts "chain broken".red
+				output[:long] << "chain broken\n"
 				check_chain_status = false
 			end
 		else
-		# Check agains certificate store
-			unless certificate.self_signed?
-				if cert_store.verify certificate
-					puts "checked against os store; chain ok".yellow
+			unless cert.self_signed?
+				if cert_store.verify cert
+					output[:long] << "checked against os store; chain ok\n"
 				else
-					puts "checked against os store; chain broken".red
-					chain_check_status = false
+					output[:long] << "checked agains os store; chain broken\n"
+					check_chain_status = false
 				end
 			else
-				puts "\n"
+				output[:long] << "\n"
 			end
 		end
 	else
-		puts "\n"
+		output[:long] << "\n"
 	end
-	# puts "\n" if chain.size == i + 1 || check_chain_status == false
 end
+
+puts output[:header]
+puts output[:short]
+puts output[:long]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: check_certificate_chain
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 1.0.1
 platform: ruby
 authors:
 - Jora Porcu
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-07-20 00:00:00.000000000 Z
+date: 2017-07-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openssl
@@ -17,28 +17,14 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2'
-  type: :runtime
+  type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2'
-- !ruby/object:Gem::Dependency
-  name: colorize
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0'
-description: cli tool that dumps https cert chain information and check the chain.
+description: Cli tool to check http connection certificates.
 email: jitlogan@gmail.com
 executables:
 - check_certificate_chain
@@ -66,8 +52,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.12
+rubygems_version: 2.4.5.2
 signing_key: 
 specification_version: 4
-summary: cli tool to check http connection certificates
+summary: Check HTTPS certificates
 test_files: []