tlsaudit

Documentation

Index

• Variables
• func CompactDB(dayPath, scanID string)
• func GetNextScanID() string
• func GetScanData(date, scanID string) []tlsmodel.HumanScanResult
• func GetScanSummaries(rewindDays int) []tlsmodel.ScanResultSummary
• func HandShakeClientHello(hostname string, config *gotls.Config, startTLS bool, timeout time.Duration) (tlsmodel.ServerHelloMessage, error)
• func HandShakeClientHelloGetServerCert(hostname string, config *gotls.Config, timeout time.Duration) <-chan ServerHelloAndCert
• func HandShakeUpToKeyExchange(hostname string, config *gotls.Config, startTLS bool, timeout time.Duration) (tlsmodel.HelloAndKey, error)
• func ListScans(rewindDays int, completed bool) (result []tlsmodel.ScanRequest)
• func LoadScanRequest(dir, scanID string) (psr tlsmodel.PersistedScanRequest, e error)
• func MergeResultChannels(channels ...<-chan tlsmodel.ScanResult) <-chan tlsmodel.ScanResult
• func PersistScanRequest(psr tlsmodel.PersistedScanRequest)
• func PersistScans(psr tlsmodel.PersistedScanRequest, server string, scans []tlsmodel.ScanResult)
• func RealtimeScan(w http.ResponseWriter, req *http.Request)
• func ScanCIDRTLS(cidr string, config tlsmodel.ScanConfig) <-chan tlsmodel.ScanResult
• func ScheduleTLSAudit(ipSource func() []string, resolver func(string) string)
• func Service(configPath string)
• func StreamScan(day, scanID string, ...)
• type ServerHelloAndCert

Variables

var (
	//TLSAuditConfigPath is the default config path of the TLSAudit service
	TLSAuditConfigPath = filepath.Join("data", "config", "TLSAuditConfig.yml")
)

Functions

func CompactDB

func CompactDB(dayPath, scanID string)

CompactDB reclaims space by pruning the database

func GetNextScanID

func GetNextScanID() string

GetNextScanID returns the next unique scan ID

func GetScanData

func GetScanData(date, scanID string) []tlsmodel.HumanScanResult

GetScanData returns the scan results of a given scan

func GetScanSummaries

func GetScanSummaries(rewindDays int) []tlsmodel.ScanResultSummary

GetScanSummaries returns summaries of scans in the last number of days indicated by rewindDays

func HandShakeClientHello

func HandShakeClientHello(hostname string, config *gotls.Config, startTLS bool, timeout time.Duration) (tlsmodel.ServerHelloMessage, error)

HandShakeClientHello sends client hello and gets Server Hello and Certificates

func HandShakeClientHelloGetServerCert

func HandShakeClientHelloGetServerCert(hostname string, config *gotls.Config, timeout time.Duration) <-chan ServerHelloAndCert

HandShakeClientHelloGetServerCert sends client hello and gets Server Hello and Certificates

func HandShakeUpToKeyExchange

func HandShakeUpToKeyExchange(hostname string, config *gotls.Config, startTLS bool, timeout time.Duration) (tlsmodel.HelloAndKey, error)

HandShakeUpToKeyExchange starts the handshake up till the acquisition of server key exchanges

func ListScans

func ListScans(rewindDays int, completed bool) (result []tlsmodel.ScanRequest)

ListScans returns the ScanID list of persisted scans

func LoadScanRequest

func LoadScanRequest(dir, scanID string) (psr tlsmodel.PersistedScanRequest, e error)

LoadScanRequest retrieves persisted scan request from folder following a layout pattern

func MergeResultChannels

func MergeResultChannels(channels ...<-chan tlsmodel.ScanResult) <-chan tlsmodel.ScanResult

MergeResultChannels as suggested

func PersistScanRequest

func PersistScanRequest(psr tlsmodel.PersistedScanRequest)

PersistScanRequest persists scan request

func PersistScans

func PersistScans(psr tlsmodel.PersistedScanRequest, server string, scans []tlsmodel.ScanResult)

PersistScans persists the result of scans per server

func RealtimeScan

func RealtimeScan(w http.ResponseWriter, req *http.Request)

RealtimeScan runs a scan asynchronously and streams result over a websocket

func ScanCIDRTLS

func ScanCIDRTLS(cidr string, config tlsmodel.ScanConfig) <-chan tlsmodel.ScanResult

ScanCIDRTLS combines a port scan with TLS scan for a CIDR range to return the open ports, and the TLS setting for each port over the result channel

func ScheduleTLSAudit

func ScheduleTLSAudit(ipSource func() []string, resolver func(string) string)

ScheduleTLSAudit runs TLSAudit scan

func Service

func Service(configPath string)

Service main service entry function

func StreamScan

func StreamScan(day, scanID string, callback func(progress, total int, results []tlsmodel.HumanScanResult))

StreamScan streams the result to a callback function

Types

type ServerHelloAndCert

type ServerHelloAndCert struct {
	ServerHello tlsmodel.ServerHelloMessage
	Cert        tlsmodel.CertificateMessage
	StartTLS    bool
	Err         error
}

ServerHelloAndCert struct holds server hello message and certificate (indicating whether it was STARTTLS), otherwise the error