@mridang/webhint-hint-plumbline 0.2.0 → 0.3.0

package/dist/lib/tls/remote.d.ts

@@ -0,0 +1,52 @@
+import type { EphemeralKey } from './evaluate.js';
+import type { TlsConnect } from './client.js';
+/** The certificate facts the prober reads, named as Node names them. */
+export interface RemoteCertificate {
+    subject: Record<string, string>;
+    issuer: Record<string, string>;
+    subjectaltname: string;
+    valid_from: string;
+    valid_to: string;
+    serialNumber: string;
+    fingerprint256: string;
+    keyType: string;
+    bits?: number;
+    asn1Curve?: string;
+    signatureAlgorithm: string;
+}
+/** What the prober answers. */
+export interface RemoteHandshake {
+    protocol: string;
+    cipher: {
+        name: string;
+        standardName: string;
+    };
+    authorized: boolean;
+    authorizationError: string | null;
+    ephemeral: EphemeralKey | null;
+    /** DER, base64, leaf first. */
+    chain: string[] | null;
+    certificates: RemoteCertificate[] | null;
+    /** DER, base64. */
+    ocsp: string | null;
+    compression?: boolean;
+}
+/** What is asked of the prober. */
+export interface RemoteRequest {
+    host: string;
+    port: number;
+    starttls?: 'smtp';
+    minVersion?: string;
+    maxVersion?: string;
+    /** An OpenSSL cipher list. */
+    ciphers?: string;
+    /** An OpenSSL signature algorithm list. */
+    sigalgs?: string;
+    /** Colon separated key exchange groups. */
+    ecdhCurve?: string;
+    requestOCSP?: boolean;
+}
+/** Makes one request to the prober; rejects when the handshake failed. */
+export type RemoteCall = (request: RemoteRequest) => Promise<RemoteHandshake>;
+/** A `TlsConnect` that asks the prober. */
+export declare function remoteConnect(call: RemoteCall): TlsConnect;

package/dist/lib/tls/remote.js

@@ -0,0 +1,53 @@
+import { TLS_VERSIONS } from './constants.js';
+/** The base64 text as bytes. */
+function bytesOf(base64) {
+    return Buffer.from(base64, 'base64');
+}
+/** The leaf certificate as Node shows it, from what the prober read. */
+function peerOf(certs, chain) {
+    const leaf = certs[0];
+    return {
+        subject: leaf?.subject ?? {},
+        issuer: leaf?.issuer ?? {},
+        subjectaltname: leaf?.subjectaltname,
+        valid_from: leaf?.valid_from,
+        valid_to: leaf?.valid_to,
+        serialNumber: leaf?.serialNumber,
+        fingerprint256: leaf?.fingerprint256,
+        bits: leaf?.bits,
+        asn1Curve: leaf?.asn1Curve,
+        raw: chain[0],
+    };
+}
+/** A `TlsConnect` that asks the prober. */
+export function remoteConnect(call) {
+    return async (target, options) => {
+        const answer = await call({
+            host: target.host,
+            port: target.port,
+            ...(target.starttls ? { starttls: target.starttls } : {}),
+            ...(options.minVersion ? { minVersion: options.minVersion } : {}),
+            ...(options.maxVersion ? { maxVersion: options.maxVersion } : {}),
+            ...(options.ciphers ? { ciphers: options.ciphers } : {}),
+            ...(options.sigalgs ? { sigalgs: options.sigalgs } : {}),
+            ...(options.ecdhCurve ? { ecdhCurve: options.ecdhCurve } : {}),
+            ...(options.requestOCSP ? { requestOCSP: true } : {}),
+        });
+        const chain = (answer.chain ?? []).map(bytesOf);
+        const protocol = TLS_VERSIONS.includes(answer.protocol)
+            ? answer.protocol
+            : null;
+        const result = {
+            protocol,
+            cipher: answer.cipher,
+            ephemeral: answer.ephemeral,
+            authorized: answer.authorized,
+            authorizationError: answer.authorizationError,
+            chain,
+            peerCertificate: peerOf(answer.certificates ?? [], chain),
+            ocspResponse: answer.ocsp ? bytesOf(answer.ocsp) : null,
+        };
+        return result;
+    };
+}
+//# sourceMappingURL=remote.js.map

package/dist/lib/tls/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../src/lib/tls/remote.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAmB,MAAM,gBAAgB,CAAC;AAqD/D,gCAAgC;AAChC,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,SAAS,MAAM,CACb,KAAmC,EACnC,KAAwB;IAExB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;QAC5B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;QAC1B,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,QAAQ,EAAE,IAAI,EAAE,QAAQ;QACxB,YAAY,EAAE,IAAI,EAAE,YAAY;QAChC,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,IAAI,EAAE,IAAI,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;KACgB,CAAC;AAClC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAI,YAAkC,CAAC,QAAQ,CAC3D,MAAM,CAAC,QAAQ,CAChB;YACC,CAAC,CAAE,MAAM,CAAC,QAAuB;YACjC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,MAAM,GAAgB;YAC1B,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,KAAK;YACL,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC;YACzD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACxD,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mridang/webhint-hint-plumbline",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "scripts": {
     "prepack": "tsc --build",