ruby-sslyze 0.2.1 → 1.0.0

data/lib/sslyze/xml/certinfo/received_certificate_chain.rb

@@ -0,0 +1,48 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/certinfo/has_certificates'
+
+module SSLyze
+  class XML
+    class Certinfo < Plugin
+      #
+      # Represents the `<receivedCertificateChain>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class ReceivedCertificateChain
+
+        include Types
+        include HasCertificates
+
+        #
+        # Initializes the {ReceivedCertificateChain} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # Parses the `isChainOrderValid` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def is_chain_order_valid?
+          Boolean[@node['isChainOrderValid']]
+        end
+
+        #
+        # Parses the `containsAnchorCertificate` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def contains_anchor_certificate?
+          Boolean[@node['containsAnchorCertificate']]
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/compression.rb

@@ -0,0 +1,33 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/compression/compression_method'
+
+module SSLyze
+  class XML
+    #
+    # Represents the `<compression>` XML element.
+    #
+    # @since 1.0.0
+    #
+    class Compression < Plugin
+
+      #
+      # Parses the `<compressionMethod>` XML element.
+      #
+      # @return [CompressionMethod]
+      #
+      def deflate
+        @compression_method ||= CompressionMethod.new(
+          @node.at_xpath('compressionMethod[@type="DEFLATE"]')
+        )
+      end
+
+      #
+      # @see CompressionMethod#is_supported?
+      #
+      def deflate?
+        deflate.is_supported?
+      end
+
+    end
+  end
+end

data/lib/sslyze/xml/compression/compression_method.rb

@@ -0,0 +1,38 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/attributes/is_supported'
+
+module SSLyze
+  class XML
+    class Compression < Plugin
+      #
+      # Represents the `<compressionMethod>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class CompressionMethod
+
+        include Attributes::IsSupported
+
+        #
+        # Initializes the {CompressionMethod} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #   The `<compressionMethod>` XML element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # The type of compression.
+        #
+        # @return [Symbol]
+        #
+        def type
+          @type ||= @node['type'].to_sym
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/fallback.rb

@@ -0,0 +1,34 @@
+require 'sslyze/xml/plugin'
+
+module SSLyze
+  class XML
+    #
+    # Represents the `<fallback>` XML element.
+    #
+    # @since 1.0.0
+    #
+    class Fallback < Plugin
+
+      #
+      # Parses the `<tlsFallbackScsv>` XML element.
+      #
+      # @return [TLSFallbackSCSV]
+      #
+      def tls_fallback_scsv
+        @tls_fallback_scsv ||= TLSFallbackSCSV.new(
+          @node.at_xpath('tlsFallbackScsv')
+        )
+      end
+
+      #
+      # @see TLSFallbackSCSV#is_supported?
+      #
+      def is_supported?
+        tls_fallback_scsv.is_supported?
+      end
+
+      alias supported? is_supported?
+
+    end
+  end
+end

data/lib/sslyze/xml/fallback/tls_fallback_scsv.rb

@@ -0,0 +1,27 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/is_supported'
+
+module SSLyze
+  class XML
+    class Fallback < Plugin
+      #
+      # Represents the `<tlsFallbackScsv>` XML element.
+      #
+      class TLSFallbackSCSV
+
+        include IsSupported
+
+        #
+        # Initializes the {TLSFallbackSCSV} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #   The `<tlsFallbackScsv>` XML element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/heartbleed.rb

@@ -0,0 +1,38 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/heartbleed/openssl_heartbleed'
+
+module SSLyze
+  class XML
+    #
+    # Represents the `<heartbleed>` XML element.
+    #
+    # @since 1.0.0
+    #
+    class Heartbleed < Plugin
+
+      #
+      # Parses the `<openSslHeartbleed>` XML element.
+      #
+      # @return [OpenSSLHeartbleed]
+      #
+      def openssl_heartbleed
+        @openssl_heartbleed ||= if (element = @node.at_xpath('openSslHeartbleed'))
+                                  OpenSSLHeartbleed.new(element)
+                                end
+      end
+
+      alias openssl openssl_heartbleed
+
+      #
+      # @see #has_openssl_heartbleed?
+      #
+      def is_vulnerable?
+        openssl_heartbleed && openssl_heartbleed.is_vulnerable?
+      end
+
+      alias vulnerable? is_vulnerable?
+
+    end
+  end
+end

data/lib/sslyze/xml/heartbleed/openssl_heartbleed.rb

@@ -0,0 +1,29 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/attributes/is_vulnerable'
+
+module SSLyze
+  class XML
+    class Heartbleed < Plugin
+      #
+      # Represents the `<openSslHeartbleed>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class OpenSSLHeartbleed
+
+        include Attributes::IsVulnerable
+
+        #
+        # Initializes the {OpenSSLHeartbleed} object.
+        #
+        # @param [Nokogiri::XML::Element] node
+        #   The `<openSslHeartbleed>` XML element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/http_headers.rb

@@ -0,0 +1,42 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/http_headers/http_strict_transport_security'
+require 'sslyze/xml/http_headers/http_public_key_pinning'
+
+module SSLyze
+  class XML
+    #
+    # Represents the `<http_headers>` XML element.
+    #
+    # @since 1.0.0
+    #
+    class HTTPHeaders < Plugin
+
+      #
+      # HTTP Strict-Transport-Security header information.
+      #
+      # @return [HTTPStrictTransportSecurity, nil]
+      #
+      def http_strict_transport_security
+        @http_strict_transport_security ||= if (element = @node.at_xpath('httpStrictTransportSecurity'))
+                                              HTTPStrictTransportSecurity.new(element)
+                                            end
+      end
+
+      alias strict_transport_security http_strict_transport_security
+
+      #
+      # HTTP Public-Key-Pinning header information.
+      #
+      # @return [HTTPPublicKeyPinning, nil]
+      #
+      def http_public_key_pinning
+        @http_public_key_pinning ||= if (element = @node.at_xpath('httpPublicKeyPinning'))
+                                       HTTPPublicKeyPinning.new(element)
+                                     end
+      end
+
+      alias public_key_pinning http_public_key_pinning
+
+    end
+  end
+end

data/lib/sslyze/xml/http_headers/http_public_key_pinning.rb

@@ -0,0 +1,121 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/attributes/is_supported'
+require 'sslyze/xml/attributes/exception'
+
+module SSLyze
+  class XML
+    class HTTPHeaders < Plugin
+      #
+      # Represents the `<httpPublicKeyPinning>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class HTTPPublicKeyPinning
+
+        include Types
+        include Attributes::IsSupported
+        include Attributes::Exception
+
+        #
+        # Initializes the {HTTPPublicKeyPinning} element.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # Parses each `pinSha256` XML element.
+        #
+        # @yield [sha256]
+        #   Yields each SHA256 checksum.
+        #
+        # @yieldparam [String] sha256
+        #   An individual pinned SHA256 checksum.
+        #
+        # @return [Enumerator]
+        #
+        def each_pin_sha256
+          return enum_for(__method__) unless block_given?
+
+          @node.xpath('pinSha256').each do |element|
+            yield element.inner_text
+          end
+        end
+
+        alias each_sha256 each_pin_sha256
+
+        #
+        # @return [Array<String>]
+        #
+        # @see #each_pin_sha256
+        #
+        def pin_sha256s
+          each_pin_sha256.to_a
+        end
+
+        alias sha256s pin_sha256s
+
+        #
+        # Parses the `includeSubDomains` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def include_sub_domains?
+          Boolean[@node['includeSubDomains']]
+        end
+
+        #
+        # Parses the `maxAge` attribute.
+        #
+        # @return [Integer, nil]
+        #
+        def max_age
+          @max_age ||= if (value = @node['maxAge'])
+                         value.to_i
+                       end
+        end
+
+        #
+        # Parses the `reportOnly` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def report_only
+          Boolean[@node['reportOnly']]
+        end
+
+        #
+        # Parses the `reportUri` XML attribute.
+        #
+        # @return [String, nil]
+        #
+        def report_uri
+          @report_uri ||= case (value = @node['reportUri'])
+                          when nil, 'None' then nil
+                          else                  value
+                          end
+        end
+
+        #
+        # Parses the `isValidPinConfigured` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def is_valid_pin_configured?
+          Boolean[@node['isValidPinConfigured']]
+        end
+
+        #
+        # Parses the `isBackupPinConfigured` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def is_backup_pin_configured?
+          Boolean[@node['isBackupPinConfigured']]
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/xml/http_headers/http_strict_transport_security.rb

@@ -0,0 +1,59 @@
+require 'sslyze/xml/plugin'
+require 'sslyze/xml/types'
+require 'sslyze/xml/attributes/is_supported'
+require 'sslyze/xml/attributes/exception'
+
+module SSLyze
+  class XML
+    class HTTPHeaders < Plugin
+      #
+      # Represents the `<httpStrictTransportSecurity/>` XML element.
+      #
+      # @since 1.0.0
+      #
+      class HTTPStrictTransportSecurity
+
+        include Types
+        include Attributes::IsSupported
+        include Attributes::Exception
+
+        #
+        # Initializes the {HTTPStrictTransportSecurity} object.
+        #
+        def initialize(node)
+          @node = node
+        end
+
+        #
+        # Parses the `includeSubDomains` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def include_sub_domains?
+          Boolean[@node['includeSubDomains']]
+        end
+
+        #
+        # Parses the `maxAge` XML attribute.
+        #
+        # @return [Integer, nil]
+        #
+        def max_age
+          @max_age ||= if (value = @node['maxAge'])
+                         value.to_i
+                       end
+        end
+
+        #
+        # Parses the `preload` XML attribute.
+        #
+        # @return [Boolean]
+        #
+        def preload?
+          Boolean[@node['preload']]
+        end
+
+      end
+    end
+  end
+end