certificate

Documentation

Index

• Constants
• Variables
• func GetValidityMap(trusted_ubuntu, trusted_mozilla, trusted_microsoft, trusted_apple, ... bool) map[string]ValidationInfo
• func MD5Hash(data []byte) string
• func PKPSHA256Hash(cert *x509.Certificate) string
• func SHA1Hash(data []byte) string
• func SHA256Hash(data []byte) string
• func SHA256SubjectSPKI(cert *x509.Certificate) string
• type Certificate
  • func CertToStored(cert *x509.Certificate, parentSignature, domain, ip string, TSName string, ...) Certificate
  • func (c Certificate) GetBooleanValidity() (trusted_ubuntu, trusted_mozilla, trusted_microsoft, trusted_apple, ... bool)
  • func (c Certificate) IsSelfSigned() bool
  • func (cert Certificate) ToX509() (xcert *x509.Certificate, err error)
• type Chain
• type Extensions
• type Hashes
• type IDs
• type JsonRawCert
• type Paths
  • func (p Paths) GetValidityMap() map[string]ValidationInfo
  • func (p Paths) IsTrustedBy(truststore string) bool
  • func (p Paths) String() (str string)
• type Subject
  • func (s Subject) String() string
• type SubjectPublicKeyInfo
• type Trust
• type TrustStore
• type ValidationInfo
• type Validity
• type X509v3BasicConstraints

Constants

const (
	Ubuntu_TS_name    = "Ubuntu"
	Mozilla_TS_name   = "Mozilla"
	Microsoft_TS_name = "Microsoft"
	Apple_TS_name     = "Apple"
	Android_TS_name   = "Android"

	Default_Cisco_Umbrella_Rank = 2147483647 // max positive value of postgres integer
)

const (
	E_SEP string = "   "
	S_SEP string = "│  "
	T_SEP string = "├──"
	L_SEP string = "└──"
	C_SEP string = "───"
)

Variables

var ExtKeyUsage = [...]string{
	"ExtKeyUsageAny",
	"ExtKeyUsageServerAuth",
	"ExtKeyUsageClientAuth",
	"ExtKeyUsageCodeSigning",
	"ExtKeyUsageEmailProtection",
	"ExtKeyUsageIPSECEndSystem",
	"ExtKeyUsageIPSECTunnel",
	"ExtKeyUsageIPSECUser",
	"ExtKeyUsageTimeStamping",
	"ExtKeyUsageOCSPSigning",
	"ExtKeyUsageMicrosoftServerGatedCrypto",
	"ExtKeyUsageNetscapeServerGatedCrypto",
}

var PublicKeyAlgorithm = [...]string{
	"UnknownPublicKeyAlgorithm",
	"RSA",
	"DSA",
	"ECDSA",
}

var SignatureAlgorithm = [...]string{
	"UnknownSignatureAlgorithm",
	"MD2WithRSA",
	"MD5WithRSA",
	"SHA1WithRSA",
	"SHA256WithRSA",
	"SHA384WithRSA",
	"SHA512WithRSA",
	"DSAWithSHA1",
	"DSAWithSHA256",
	"ECDSAWithSHA1",
	"ECDSAWithSHA256",
	"ECDSAWithSHA384",
	"ECDSAWithSHA512",
}

Functions

func GetValidityMap

func GetValidityMap(trusted_ubuntu, trusted_mozilla, trusted_microsoft, trusted_apple, trusted_android bool) map[string]ValidationInfo

GetValidityMap converts boolean validity variables to a validity map.

func MD5Hash

func MD5Hash(data []byte) string

func PKPSHA256Hash

func PKPSHA256Hash(cert *x509.Certificate) string

func SHA1Hash

func SHA1Hash(data []byte) string

func SHA256Hash

func SHA256Hash(data []byte) string

func SHA256SubjectSPKI

func SHA256SubjectSPKI(cert *x509.Certificate) string

Types

type Certificate

type Certificate struct {
	ID                     int64                     `json:"id"`
	Serial                 string                    `json:"serialNumber"`
	ScanTarget             string                    `json:"scanTarget,omitempty"`
	IPs                    []string                  `json:"ips,omitempty"`
	Version                int                       `json:"version"`
	SignatureAlgorithm     string                    `json:"signatureAlgorithm"`
	Issuer                 Subject                   `json:"issuer"`
	Validity               Validity                  `json:"validity"`
	Subject                Subject                   `json:"subject"`
	Key                    SubjectPublicKeyInfo      `json:"key"`
	X509v3Extensions       Extensions                `json:"x509v3Extensions"`
	X509v3BasicConstraints string                    `json:"x509v3BasicConstraints"`
	CA                     bool                      `json:"ca"`
	Analysis               interface{}               `json:"analysis,omitempty"` //for future use...
	ParentSignature        []string                  `json:"parentSignature,omitempty"`
	ValidationInfo         map[string]ValidationInfo `json:"validationInfo"`
	FirstSeenTimestamp     time.Time                 `json:"firstSeenTimestamp"`
	LastSeenTimestamp      time.Time                 `json:"lastSeenTimestamp"`
	Hashes                 Hashes                    `json:"hashes"`
	Raw                    string                    `json:"Raw"`
	CiscoUmbrellaRank      int64                     `json:"ciscoUmbrellaRank"`
	Anomalies              string                    `json:"anomalies,omitempty"`
}

func CertToStored

func CertToStored(cert *x509.Certificate, parentSignature, domain, ip string, TSName string, valInfo *ValidationInfo) Certificate

certtoStored returns a Certificate struct created from a X509.Certificate

func (Certificate) GetBooleanValidity

func (c Certificate) GetBooleanValidity() (trusted_ubuntu, trusted_mozilla, trusted_microsoft, trusted_apple, trusted_android bool)

GetBooleanValidity converts the validation info map to DB booleans

func (Certificate) IsSelfSigned

func (c Certificate) IsSelfSigned() bool

IsSelfSigned return true if the subject and issuer fields of a certificate are identical

func (Certificate) ToX509

func (cert Certificate) ToX509() (xcert *x509.Certificate, err error)

ToX509() returns the crypto/x509 version of a certificate

type Chain

type Chain struct {
	Domain string   `json:"domain"`
	IP     string   `json:"ip"`
	Certs  []string `json:"certs"`
}

type Extensions

type Extensions struct {
	AuthorityKeyId           string   `json:"authorityKeyId"`
	SubjectKeyId             string   `json:"subjectKeyId"`
	KeyUsage                 []string `json:"keyUsage"`
	ExtendedKeyUsage         []string `json:"extendedKeyUsage"`
	SubjectAlternativeName   []string `json:"subjectAlternativeName"`
	CRLDistributionPoints    []string `json:"crlDistributionPoint"`
	PolicyIdentifiers        []string `json:"policyIdentifiers,omitempty"`
	PermittedDNSDomains      []string `json:"permittedDNSNames,omitempty"`
	PermittedIPAddresses     []string `json:"permittedIPAddresses,omitempty"`
	ExcludedDNSDomains       []string `json:"excludedDNSNames,omitempty"`
	ExcludedIPAddresses      []string `json:"excludedIPAddresses,omitempty"`
	IsTechnicallyConstrained bool     `json:"isTechnicallyConstrained"`
}

Currently exporting extensions that are already decoded into the x509 Certificate structure

type Hashes

type Hashes struct {
	MD5               string `json:"md5,omitempty"`
	SHA1              string `json:"sha1,omitempty"`
	SHA256            string `json:"sha256,omitempty"`
	SHA256SubjectSPKI string `json:"sha256_subject_spki,omitempty"`
	PKPSHA256         string `json:"pin-sha256,omitempty"`
}

type IDs

type IDs struct {
	// contains filtered or unexported fields
}

type JsonRawCert

type JsonRawCert struct {
	RawCert string `json:"rawCert"`
}

type Paths

type Paths struct {
	Cert    *Certificate `json:"certificate"`
	Parents []Paths      `json:"parents"`
	// contains filtered or unexported fields
}

Paths represent the chain of trust between a given certificate and one of multiple parents. It is meant to be walked recursively from an end-entity to a trusted root

func (Paths) GetValidityMap

func (p Paths) GetValidityMap() map[string]ValidationInfo

func (Paths) IsTrustedBy

func (p Paths) IsTrustedBy(truststore string) bool

func (Paths) String

func (p Paths) String() (str string)

type Subject

type Subject struct {
	ID           int64    `json:"id,omitempty"`
	Country      []string `json:"c,omitempty"`
	Organisation []string `json:"o,omitempty"`
	OrgUnit      []string `json:"ou,omitempty"`
	CommonName   string   `json:"cn,omitempty"`
}

func (Subject) String

func (s Subject) String() string

String() prints the subject as a single string, following OpenSSL's display format: Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.com

type SubjectPublicKeyInfo

type SubjectPublicKeyInfo struct {
	Alg      string  `json:"alg,omitempty"`
	Size     float64 `json:"size,omitempty"`
	Exponent float64 `json:"exponent,omitempty"`
	X        string  `json:"x,omitempty"`
	Y        string  `json:"y,omitempty"`
	P        string  `json:"p,omitempty"`
	Q        string  `json:"q,omitempty"`
	G        string  `json:"g,omitempty"`
	Curve    string  `json:"curve,omitempty"`
}

type Trust

type Trust struct {
	ID               int64
	CertID           int64
	IssuerID         int64
	Timestamp        time.Time
	TrustUbuntu      bool
	TrustMozilla     bool
	TrustedMicrosoft bool
	TrustedApple     bool
	TrustedAndroid   bool
	Current          bool
}

type TrustStore

type TrustStore struct {
	Name  string
	Certs *x509.CertPool
}

type ValidationInfo

type ValidationInfo struct {
	IsValid         bool   `json:"isValid,omitempty"`
	ValidationError string `json:"validationError,omitempty"`
}

type Validity

type Validity struct {
	NotBefore time.Time `json:"notBefore"`
	NotAfter  time.Time `json:"notAfter"`
}

type X509v3BasicConstraints

type X509v3BasicConstraints struct {
	CA       bool        `json:"ca"`
	Analysis interface{} `json:"analysis,omitempty"`
}