sslscan_wrapper 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 17102ec6e6de9081e6b60fd9c8c87b9402a48fbdb9835504e186c72446acc751
-  data.tar.gz: fd6a13ba469b548cecc3334ef7912602040622591ecc85fe35042487a4e60390
+  metadata.gz: 03f023bc03720c2b805c53f8fb96461c9e08f20c004d1ab47a5e7530e37348bd
+  data.tar.gz: d54e2450f1ee9807deb1bdf4685a8ba0c8af10fb9d9c2c700cf02bb70e39cd7c
 SHA512:
-  metadata.gz: 110da3e2aa079522204b497810c4dd73604ca9a6cc94c87c5f5774b311a35669f89646cbc9fcbfd6b18ca54c258a1a601269a26f77a37c4faebf2e3cd397016d
-  data.tar.gz: 3561cca8da3ab70d813955657afb89070b27e86467634a58247ccd2feb48356ed03704018d9303c7a6bdf5bd0df4f6b10fa953d04749ec183a327c8c8e5e7468
+  metadata.gz: 90dc7681488b7a5ce688521f9e98c1b2447df47b901a50b4a4a3d5052ad2f1199c0759f4ac0ca96d2b09cd246160972a3ac9aed226a4d9991d5ef847c710cc65
+  data.tar.gz: d25025101165013b3b9ba08f082f0f837a7b209af464d37b65e6bfdd0c8467ab873871a320fb59f4de77057ab3a8de5bd4d8ea6a5b9e8b182132e68e5f0b0faa

data/lib/sslscan_wrapper/report.rb

@@ -1,4 +1,5 @@
 require 'nokogiri'
+require 'openssl'
 require 'time'
 
 module SslscanWrapper
@@ -20,59 +21,72 @@ module SslscanWrapper
       @doc = Nokogiri::XML(@body)
     end
 
-    # The hostname of the scanned host
-    def host
-      @doc.xpath('//ssltest/@host').first.value
+    def self.attr_first_value_accessor(name, xpath)
+      define_method(name) do
+        node = @doc.xpath(xpath).first
+        node.value unless node.nil?
+      end
     end
 
-    # The port of the scan report
-    def port
-      @doc.xpath('//ssltest/@port').first.value
+    def self.attr_first_value_boolean_true?(name, xpath)
+      define_method(name) do
+        node = @doc.xpath(xpath).first
+        node.value.to_i == 1 unless node.nil?
+      end
     end
 
-    # Is ssl compression supported on target?
-    def compression_supported?
-      @doc.xpath('//compression/@supported').first.value == '1'
+    def self.content_first_node_accessor(name, xpath)
+      define_method(name) do
+        node = @doc.xpath(xpath).first
+        node.content unless node.nil?
+      end
     end
 
-    # Does the target support TLS renegotiation?
-    def renegotiation_supported?
-      @doc.xpath('//renegotiation/@supported').first.value == '1'
+    def self.content_first_node_boolean_true?(name, xpath)
+      define_method(name) do
+        node = @doc.xpath(xpath).first
+        node.content == 'true' unless node.nil?
+      end
     end
 
-    def renegotiation_secure?
-      @doc.xpath('//renegotiation/@secure').first.value == '1'
+    def self.all_attr_values_accessor(name, xpath)
+      define_method(name) do
+        @doc.xpath(xpath).map(&:value)
+      end
     end
 
+    # The hostname of the scanned host
+    attr_first_value_accessor :host, '//ssltest/@host'
+
+    # The port of the scan report
+    attr_first_value_accessor :port, '//ssltest/@port'
+
+    # Is ssl compression supported on target?
+    attr_first_value_boolean_true? :compression_supported?, '//compression/@supported'
+
+    # Does the target support TLS renegotiation?
+    attr_first_value_boolean_true? :renegotiation_supported?, '//renegotiation/@supported'
+
+    # Is the renegotiation secure?
+    attr_first_value_boolean_true? :renegotiation_secure?, '//renegotiation/@secure'
+
     # Signature algorithm used in the certificate
-    def signature_algorithm
-      @doc.xpath('//certificate/signature-algorithm').first.content
-    end
+    content_first_node_accessor :signature_algorithm, '//certificate/signature-algorithm'
 
     # Subject of the certificate
-    def subject
-      @doc.xpath('//certificate/subject').first.content
-    end
+    content_first_node_accessor :subject, '//certificate/subject'
 
     # Subject alternative names of the certificate
-    def altnames
-      @doc.xpath('//certificate/altnames').first.content
-    end
+    content_first_node_accessor :altnames, '//certificate/altnames'
 
     # Issuer of the certificate
-    def issuer
-      @doc.xpath('//certificate/issuer').first.content
-    end
+    content_first_node_accessor :issuer, '//certificate/issuer'
 
     # Is the certificate a self-signed certificate?
-    def self_signed?
-      @doc.xpath('//certificate/self-signed').first.content == 'true'
-    end
+    content_first_node_boolean_true? :self_signed?, '//certificate/self-signed'
 
     # Is the certificate expired?
-    def expired?
-      @doc.xpath('//certificate/expired').first.content == 'true'
-    end
+    content_first_node_boolean_true? :expired?, '//certificate/expired'
 
     # Time the certificate starts to be valid
     def not_before
@@ -87,28 +101,38 @@ module SslscanWrapper
     end
 
     # Returns a list of supported ciphers
-    def ciphers
-      @doc.xpath('//cipher/@cipher').map(&:value)
-    end
+    all_attr_values_accessor :ciphers, '//cipher/@cipher'
 
     # Is the cipher supported?
-    def cipher_supported?(cipher)
-      @doc.xpath("//cipher[@cipher=\"#{cipher}\"]").count > 0
+    def support_cipher?(cipher)
+      @doc.xpath("//cipher[@cipher=$cipher]", nil, { cipher: cipher }).count > 0
     end
 
     # Returns a list of preferred ciphers
-    def preferred_ciphers
-      @doc.xpath('//cipher[@status="preferred"]/@cipher').map(&:value)
-    end
+    all_attr_values_accessor :preferred_ciphers, '//cipher[@status="preferred"]/@cipher'
 
     # Returns a list of SSL/TLS protocol versions vulnerable to heartbleed
-    def heartbleed_vulnerable_sslversions
-      @doc.xpath('//heartbleed[@vulnerable="1"]/@sslversion').map(&:value)
-    end
+    all_attr_values_accessor :heartbleed_vulnerable_sslversions, '//heartbleed[@vulnerable="1"]/@sslversion'
 
     # Are there any heartblead vulnerable SSL/TLS protocol versions?
     def heartbleed_vulnerable?
       @doc.xpath('//heartbleed[@vulnerable="1"]').count > 0
     end
+
+    # Returns a list of supported SSL protocol versions
+    def sslversions
+      @doc.xpath('//cipher/@sslversion').map(&:value).uniq
+    end
+
+    # Check if a SSL protocol version is supported
+    def support_sslversion?(version)
+      @doc.xpath("//cipher[@sslversion=$version]", nil, { version: version }).count > 0
+    end
+
+    # Return the parsed certificate blob as OpenSSL::X509::Certificate
+    def certificate
+      node = @doc.xpath('//certificate/certificate-blob').first
+      OpenSSL::X509::Certificate.new(node.content) unless node.nil?
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sslscan_wrapper
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Markus Benning
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-04-04 00:00:00.000000000 Z
+date: 2018-04-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aruba