ruby-sslyze 0.2.1 → 1.0.0

data/lib/sslyze/xml/certinfo/certificate_validation.rb

@@ -0,0 +1,69 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/certinfo/certificate_validation/hostname_validation'
+require 'sslyze/xml/certinfo/certificate_validation/path_validation'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      #
+      # Represents the `<certificateValidation>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class CertificateValidation
+
+        #
+        # Initializes the {CertificateValidation} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #   The `<certificateValidation>` XML element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # Hostname based validation information.
+        #
+        # @return [HostnameValidation]
+        #
+        def hostname_validation
+          @hostname_validation ||= HostnameValidation.new(
+            @node.at_xpath('hostnameValidation')
+          )
+        end
+
+        alias hostname hostname_validation
+
+        #
+        # Enumerates over the path-based validation information.
+        #
+        # @yield [path_validation]
+        #
+        # @yieldparam [PathValidation] path_validation
+        #
+        # @return [Enumerator]
+        #
+        def each_path_validation
+          return enum_for(__method__) unless block_given?
+
+          @node.xpath('pathValidation').each do |element|
+            yield PathValidation.new(element)
+          end
+        end
+
+        #
+        # @return [Array<PathValidation>]
+        #
+        # @see #each_path_validation
+        #
+        def path_validations
+          each_path_validation.to_a
+        end
+
+        alias path path_validations
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/certificate_validation/hostname_validation.rb

@@ -0,0 +1,54 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      class CertificateValidation
+        #
+        # Represents the `<hostnameValidation>` XML element.
+        #
+        # @since 1.0.0
+        #
+        class HostnameValidation
+
+          include Types
+
+          #
+          # Initializes the element.
+          #
+          # @param [Nokogiri::XML::Element] node
+          #   The `<hostnameValidation>` XML element.
+          #
+          def initialize(node)
+            @node = node
+          end
+
+          #
+          # Determines if the certificate Common Name matches the target domain
+          # name.
+          #
+          # @return [Boolean]
+          #
+          def certificate_matches_server_hostname?
+            Boolean[@node['certificateMatchesServerHostname']]
+          end
+
+          alias matches_server_hostname? certificate_matches_server_hostname?
+
+          #
+          # The server's domain name.
+          #
+          # @return [String]
+          #
+          def server_hostname
+            @node['serverHostname']
+          end
+
+          alias to_s server_hostname
+
+        end
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/certificate_validation/path_validation.rb

@@ -0,0 +1,84 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/attributes/error'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      class CertificateValidation
+        #
+        # Represents the `<pathValidation>` XML element.
+        #
+        # @since 1.0.0
+        #
+        class PathValidation
+
+          include Types
+          include Attributes::Error
+
+          #
+          # Initializes the element.
+          #
+          # @param [Nokogiri::XML::Element] node
+          #   The `<pathValidation>` XML element.
+          #
+          def initialize(node)
+            @node = node
+          end
+
+          #
+          # @return [Boolean, nil]
+          #
+          def is_extended_validation_certificate?
+            Boolean[@node['isExtendedValidationCertificate']]
+          end
+
+          alias is_extended_validation_cert? is_extended_validation_certificate?
+
+          #
+          # @return [String]
+          #
+          def trust_store_version
+            @trust_store_version ||= @node['trustStoreVersion']
+          end
+
+          #
+          # @return [String]
+          #
+          def using_trust_store
+            @using_trust_store ||= @node['usingTrustStore']
+          end
+
+          alias trust_store using_trust_store
+
+          #
+          # The validation result.
+          #
+          # @return [Symbol, nil]
+          #
+          def validation_result
+            @validation_result ||= if (value = @node['validationResult'])
+                                     value.to_sym
+                                   end
+          end
+
+          alias result validation_result
+
+          #
+          # Determines if the {#validation_result} was `:ok`.
+          #
+          # @return [Boolean, nil]
+          #
+          def ok?
+            if validation_result
+              validation_result == :ok
+            end
+          end
+
+          alias valid? ok?
+
+        end
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/certificate_validation/verified_certificate_chain.rb

@@ -0,0 +1,41 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/certinfo/has_certificates'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      class CertificateValidation
+        #
+        # Represents the `<verifiedCertificateChain>` XML element.
+        #
+        # @since 1.0.0
+        #
+        class VerifiedCertificateChain
+
+          include Types
+          include HasCertificates
+
+          #
+          # Initializes the {VerifiedCertificateChain} object.
+          #
+          # @param [Nokogiri::XML::Element] node
+          #   The `<verifiedCertificateChain>` XML element.
+          #
+          def initialize(node)
+            @node = node
+          end
+
+          #
+          # Parses the `hasSha1SignedCertificate` XML attribute.
+          #
+          # @return [Boolean]
+          #
+          def has_sha1_signed_certificate?
+            Boolean[@node['hasSha1SignedCertificate']]
+          end
+
+        end
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/has_certificates.rb

@@ -0,0 +1,102 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/certinfo/certificate'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      #
+      # @since 1.0.0
+      #
+      module HasCertificates
+        include Enumerable
+
+        #
+        # Enumerates over each certificate in the chain.
+        #
+        # @yield [cert]
+        #   The given block will be passed each certificate.
+        #
+        # @yieldparam [Certificate] cert
+        #   A certificate in the chain.
+        #
+        # @return [Enumerator]
+        #   If no block was given, an Enumerator will be returned.
+        #
+        def each_certificate
+          return enum_for(__method__) unless block_given?
+
+          @node.xpath('certificate').each do |element|
+            yield Certificate.new(element)
+          end
+        end
+
+        alias each_cert each_certificate
+        alias each each_certificate
+
+        #
+        # Returns all certificates in the chain.
+        #
+        # @return [Array<Certificate>]
+        #
+        def certificates
+          each_certificate.to_a
+        end
+
+        alias certs certificates
+
+        #
+        # The leaf certificate.
+        #
+        # @return [Certificate, nil]
+        #
+        def leaf
+          if (element = @node.at_xpath('certificate[1]'))
+            Certificate.new(element)
+          end
+        end
+
+        #
+        # Enumerates over any intermediate certificates in the chain.
+        #
+        # @yield [cert]
+        #   The given block will be passed each intermediate certificate.
+        #
+        # @yieldparam [Certificate] cert
+        #   An intermediate certificate in the chain.
+        #
+        # @return [Enumerator]
+        #   If no block was given, an Enumerator will be returned.
+        #
+        def each_intermediate
+          return enum_for(__method__) unless block_given?
+
+          @node.xpath('certificate[position() > 1 and position() < last()]').each do |element|
+            yield Certificate.new(element)
+          end
+        end
+
+        #
+        # Returns all intermediate certificates in the chain.
+        #
+        # @return [Array<Certificate>]
+        #
+        def intermediates
+          each_intermediate.to_a
+        end
+
+        #
+        # The root certificate.
+        #
+        # @return [Certificate, nil]
+        #
+        def root
+          if (element = @node.at_xpath('certificate[last()]'))
+            Certificate.new(element)
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/ocsp_stapling.rb

@@ -0,0 +1,45 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/attributes/is_supported'
+require 'sslyze/xml/certinfo/ocsp_stapling/ocsp_response'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      #
+      # Represents the `<ocspStapling>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class OCSPStapling
+
+        include Attributes::IsSupported
+
+        #
+        # Initializes the {OCSPStapling} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #   The `<ocspStapling>` XML element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # The OCSP Response.
+        #
+        # @return [OCSPResponse, nil]
+        #
+        # @note Parses the `<ocspResponse>` XML element.
+        #
+        def ocsp_response
+          @ocsp_response ||= if (element = @node.at_xpath('ocspResponse'))
+                               OCSPResponse.new(element)
+                             end
+        end
+
+        alias response ocsp_response
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/certinfo/ocsp_stapling/ocsp_response.rb

@@ -0,0 +1,87 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+
+require 'time'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      class OCSPStapling
+        #
+        # Represents the `<ocspResponse>` XML element.
+        #
+        # @since 1.0.0
+        #
+        class OCSPResponse
+
+          include Types
+
+          #
+          # Initializes the {OCSPResponse} object.
+          #
+          # @param [Nokogiri::XML::Element] node
+          #   The `<ocspResponse>` XML element.
+          #
+          def initialize(node)
+            @node = node
+          end
+
+          #
+          # The responder's ID.
+          #
+          # @return [String]
+          #
+          # @note Parses the `responderID` attribute.
+          #
+          def responder_id
+            @responder_id ||= @node.at_xpath('responderID').inner_text
+          end
+
+          alias id responder_id
+
+          #
+          # When the response was produced at.
+          #
+          # @return [Time]
+          #
+          def produced_at
+            @produced_at ||= Time.parse(@node.at_xpath('producedAt').inner_text)
+          end
+
+          alias to_time produced_at
+
+          #
+          # The status.
+          #
+          # @return [:successful]
+          #
+          def status
+            @status ||= @node['status'].downcase.to_sym
+          end
+
+          #
+          # Determines if the response status was successful.
+          #
+          # @return [Boolean]
+          #
+          def successful?
+            status == :successful
+          end
+
+          #
+          # Specifies whether the OCSP Response is trusted by Mozilla's CA
+          # Store.
+          #
+          # @return [Boolean]
+          #
+          def is_trusted_by_mozilla_ca_store?
+            Boolean[@node['isTrustedByMozillaCAStore']]
+          end
+
+          alias trusted? is_trusted_by_mozilla_ca_store?
+
+        end
+      end
+    end
+  end
+end