-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
a199734
commit 729d2b5
Showing
6 changed files
with
2,920 additions
and
188 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,181 +1,181 @@ | ||
| // import type { CertDetails } from './types' | ||
| // import fs from 'node:fs' | ||
| // import os from 'node:os' | ||
| // import path from 'node:path' | ||
| // import { pki } from 'node-forge' | ||
| // import { config } from './config' | ||
|
|
||
| // /** | ||
| // * Checks if a certificate is valid for a given domain. | ||
| // * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| // * @param domain - The domain to check. | ||
| // * @returns {boolean} - True if the certificate is valid for the domain, false otherwise. | ||
| // */ | ||
| // export function isCertValidForDomain(certPemOrPath: string, domain: string): boolean { | ||
| // const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
| // const altNames = cert.getExtension('subjectAltName') | ||
|
|
||
| // if (altNames) { | ||
| // // @ts-expect-error - altNames is not yet typed at lib level | ||
| // for (const altName of altNames.altNames) { | ||
| // if (altName.value === domain) { | ||
| // return true | ||
| // } | ||
| // } | ||
| // } | ||
|
|
||
| // return cert.subject.getField('CN').value === domain | ||
| // } | ||
|
|
||
| // /** | ||
| // * Reads a certificate from a file. | ||
| // * @param certPath - Path to the certificate file. | ||
| // * @returns {string} - The certificate content. | ||
| // */ | ||
| // export function readCertFromFile(certPath: string): string { | ||
| // return fs.readFileSync(certPath, 'utf8') | ||
| // } | ||
|
|
||
| // /** | ||
| // * Parses and extracts details from a certificate. | ||
| // * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| // * @returns {CertDetails} - An object containing certificate details. | ||
| // */ | ||
| // export function parseCertDetails(certPemOrPath: string): CertDetails { | ||
| // const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
|
|
||
| // return { | ||
| // subject: cert.subject.attributes, | ||
| // issuer: cert.issuer.attributes, | ||
| // validFrom: cert.validity.notBefore, | ||
| // validTo: cert.validity.notAfter, | ||
| // serialNumber: cert.serialNumber, | ||
| // } | ||
| // } | ||
|
|
||
| // /** | ||
| // * Checks if a certificate is expired. | ||
| // * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| // * @returns {boolean} - True if the certificate is expired, false otherwise. | ||
| // */ | ||
| // export function isCertExpired(certPemOrPath: string): boolean { | ||
| // const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
| // const now = new Date() | ||
|
|
||
| // return now > cert.validity.notAfter | ||
| // } | ||
|
|
||
| // /** | ||
| // * Gets a certificate from a PEM string or a path to a certificate file. | ||
| // * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| // * @returns {pki.Certificate} - The certificate object. | ||
| // */ | ||
| // export function getCertificateFromCertPemOrPath(certPemOrPath: string): pki.Certificate { | ||
| // let certPem: string | ||
|
|
||
| // if (certPemOrPath.startsWith('-----BEGIN CERTIFICATE-----')) { | ||
| // // If the input is a PEM string | ||
| // certPem = certPemOrPath | ||
| // } | ||
| // else { | ||
| // // If the input is a path to the certificate file | ||
| // certPem = readCertFromFile(certPemOrPath) | ||
| // } | ||
|
|
||
| // return pki.certificateFromPem(certPem) | ||
| // } | ||
|
|
||
| // /** | ||
| // * Lists all certificates in a directory. | ||
| // * By default, it returns the certificates stored in their default locations on each operating system. | ||
| // * If no certificates are found in the default paths, it checks the fallback path. | ||
| // * @param dirPath - Path to the directory. If not provided, the default directory for the OS will be used. | ||
| // * @returns {string[]} - An array of certificate file paths. | ||
| // */ | ||
| // export function listCertsInDirectory(dirPath?: string): string[] { | ||
| // const platform = os.platform() | ||
| // let defaultDir: string | ||
|
|
||
| // if (!dirPath) { | ||
| // if (platform === 'darwin') { | ||
| // // macOS default certificate directory | ||
| // defaultDir = '/etc/ssl/certs' | ||
| // } | ||
| // else if (platform === 'win32') { | ||
| // // Windows default certificate directory | ||
| // defaultDir = 'C:\\Windows\\System32\\certsrv\\CertEnroll' | ||
| // } | ||
| // else if (platform === 'linux') { | ||
| // // Linux default certificate directory | ||
| // defaultDir = '/etc/ssl/certs' | ||
| // } | ||
| // else { | ||
| // throw new Error(`Unsupported platform: ${platform}`) | ||
| // } | ||
| // } | ||
| // else { | ||
| // defaultDir = dirPath | ||
| // } | ||
|
|
||
| // const certFiles = fs | ||
| // .readdirSync(defaultDir) | ||
| // .filter(file => file.endsWith('.crt')) | ||
| // .map(file => path.join(defaultDir, file)) | ||
|
|
||
| // // If no certificates are found in the default directory, check the fallback path | ||
| // const stacksDir = path.join(os.homedir(), '.stacks', 'ssl') | ||
| // certFiles.push( | ||
| // ...fs | ||
| // .readdirSync(stacksDir) | ||
| // .filter(file => file.endsWith('.crt')) | ||
| // .map(file => path.join(stacksDir, file)), | ||
| // ) | ||
|
|
||
| // return certFiles | ||
| // } | ||
|
|
||
| // export function makeNumberPositive(hexString: string): string { | ||
| // let mostSignificativeHexDigitAsInt = Number.parseInt(hexString[0], 16) | ||
|
|
||
| // if (mostSignificativeHexDigitAsInt < 8) | ||
| // return hexString | ||
|
|
||
| // mostSignificativeHexDigitAsInt -= 8 | ||
|
|
||
| // return mostSignificativeHexDigitAsInt.toString() + hexString.substring(1) | ||
| // } | ||
|
|
||
| // export function findFoldersWithFile(rootDir: string, fileName: string): string[] { | ||
| // const result: string[] = [] | ||
|
|
||
| // function search(dir: string) { | ||
| // try { | ||
| // const files = fs.readdirSync(dir) | ||
|
|
||
| // for (const file of files) { | ||
| // const filePath = path.join(dir, file) | ||
| // const stats = fs.lstatSync(filePath) | ||
|
|
||
| // if (stats.isDirectory()) { | ||
| // search(filePath) | ||
| // } | ||
| // else if (file === fileName) { | ||
| // result.push(dir) | ||
| // } | ||
| // } | ||
| // } | ||
| // catch (error) { | ||
| // console.warn(`Error reading directory ${dir}: ${error}`) | ||
| // } | ||
| // } | ||
|
|
||
| // search(rootDir) | ||
| // return result | ||
| // } | ||
|
|
||
| // export function debugLog(category: string, message: string, verbose?: boolean): void { | ||
| // if (verbose || config.verbose) { | ||
| // // eslint-disable-next-line no-console | ||
| // console.debug(`[tlsx:${category}] ${message}`) | ||
| // } | ||
| // } | ||
| import type { CertDetails } from './types' | ||
| import fs from 'node:fs' | ||
| import os from 'node:os' | ||
| import path from 'node:path' | ||
| import { pki } from 'node-forge' | ||
| import { config } from './config' | ||
|
|
||
| /** | ||
| * Checks if a certificate is valid for a given domain. | ||
| * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| * @param domain - The domain to check. | ||
| * @returns {boolean} - True if the certificate is valid for the domain, false otherwise. | ||
| */ | ||
| export function isCertValidForDomain(certPemOrPath: string, domain: string): boolean { | ||
| const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
| const altNames = cert.getExtension('subjectAltName') | ||
|
|
||
| if (altNames) { | ||
| // @ts-expect-error - altNames is not yet typed at lib level | ||
| for (const altName of altNames.altNames) { | ||
| if (altName.value === domain) { | ||
| return true | ||
| } | ||
| } | ||
| } | ||
|
|
||
| return cert.subject.getField('CN').value === domain | ||
| } | ||
|
|
||
| /** | ||
| * Reads a certificate from a file. | ||
| * @param certPath - Path to the certificate file. | ||
| * @returns {string} - The certificate content. | ||
| */ | ||
| export function readCertFromFile(certPath: string): string { | ||
| return fs.readFileSync(certPath, 'utf8') | ||
| } | ||
|
|
||
| /** | ||
| * Parses and extracts details from a certificate. | ||
| * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| * @returns {CertDetails} - An object containing certificate details. | ||
| */ | ||
| export function parseCertDetails(certPemOrPath: string): CertDetails { | ||
| const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
|
|
||
| return { | ||
| subject: cert.subject.attributes, | ||
| issuer: cert.issuer.attributes, | ||
| validFrom: cert.validity.notBefore, | ||
| validTo: cert.validity.notAfter, | ||
| serialNumber: cert.serialNumber, | ||
| } | ||
| } | ||
|
|
||
| /** | ||
| * Checks if a certificate is expired. | ||
| * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| * @returns {boolean} - True if the certificate is expired, false otherwise. | ||
| */ | ||
| export function isCertExpired(certPemOrPath: string): boolean { | ||
| const cert = getCertificateFromCertPemOrPath(certPemOrPath) | ||
| const now = new Date() | ||
|
|
||
| return now > cert.validity.notAfter | ||
| } | ||
|
|
||
| /** | ||
| * Gets a certificate from a PEM string or a path to a certificate file. | ||
| * @param certPemOrPath - The certificate in PEM format or the path to the certificate file. | ||
| * @returns {pki.Certificate} - The certificate object. | ||
| */ | ||
| export function getCertificateFromCertPemOrPath(certPemOrPath: string): pki.Certificate { | ||
| let certPem: string | ||
|
|
||
| if (certPemOrPath.startsWith('-----BEGIN CERTIFICATE-----')) { | ||
| // If the input is a PEM string | ||
| certPem = certPemOrPath | ||
| } | ||
| else { | ||
| // If the input is a path to the certificate file | ||
| certPem = readCertFromFile(certPemOrPath) | ||
| } | ||
|
|
||
| return pki.certificateFromPem(certPem) | ||
| } | ||
|
|
||
| /** | ||
| * Lists all certificates in a directory. | ||
| * By default, it returns the certificates stored in their default locations on each operating system. | ||
| * If no certificates are found in the default paths, it checks the fallback path. | ||
| * @param dirPath - Path to the directory. If not provided, the default directory for the OS will be used. | ||
| * @returns {string[]} - An array of certificate file paths. | ||
| */ | ||
| export function listCertsInDirectory(dirPath?: string): string[] { | ||
| const platform = os.platform() | ||
| let defaultDir: string | ||
|
|
||
| if (!dirPath) { | ||
| if (platform === 'darwin') { | ||
| // macOS default certificate directory | ||
| defaultDir = '/etc/ssl/certs' | ||
| } | ||
| else if (platform === 'win32') { | ||
| // Windows default certificate directory | ||
| defaultDir = 'C:\\Windows\\System32\\certsrv\\CertEnroll' | ||
| } | ||
| else if (platform === 'linux') { | ||
| // Linux default certificate directory | ||
| defaultDir = '/etc/ssl/certs' | ||
| } | ||
| else { | ||
| throw new Error(`Unsupported platform: ${platform}`) | ||
| } | ||
| } | ||
| else { | ||
| defaultDir = dirPath | ||
| } | ||
|
|
||
| const certFiles = fs | ||
| .readdirSync(defaultDir) | ||
| .filter(file => file.endsWith('.crt')) | ||
| .map(file => path.join(defaultDir, file)) | ||
|
|
||
| // If no certificates are found in the default directory, check the fallback path | ||
| const stacksDir = path.join(os.homedir(), '.stacks', 'ssl') | ||
| certFiles.push( | ||
| ...fs | ||
| .readdirSync(stacksDir) | ||
| .filter(file => file.endsWith('.crt')) | ||
| .map(file => path.join(stacksDir, file)), | ||
| ) | ||
|
|
||
| return certFiles | ||
| } | ||
|
|
||
| export function makeNumberPositive(hexString: string): string { | ||
| let mostSignificativeHexDigitAsInt = Number.parseInt(hexString[0], 16) | ||
|
|
||
| if (mostSignificativeHexDigitAsInt < 8) | ||
| return hexString | ||
|
|
||
| mostSignificativeHexDigitAsInt -= 8 | ||
|
|
||
| return mostSignificativeHexDigitAsInt.toString() + hexString.substring(1) | ||
| } | ||
|
|
||
| export function findFoldersWithFile(rootDir: string, fileName: string): string[] { | ||
| const result: string[] = [] | ||
|
|
||
| function search(dir: string) { | ||
| try { | ||
| const files = fs.readdirSync(dir) | ||
|
|
||
| for (const file of files) { | ||
| const filePath = path.join(dir, file) | ||
| const stats = fs.lstatSync(filePath) | ||
|
|
||
| if (stats.isDirectory()) { | ||
| search(filePath) | ||
| } | ||
| else if (file === fileName) { | ||
| result.push(dir) | ||
| } | ||
| } | ||
| } | ||
| catch (error) { | ||
| console.warn(`Error reading directory ${dir}: ${error}`) | ||
| } | ||
| } | ||
|
|
||
| search(rootDir) | ||
| return result | ||
| } | ||
|
|
||
| export function debugLog(category: string, message: string, verbose?: boolean): void { | ||
| if (verbose || config.verbose) { | ||
| // eslint-disable-next-line no-console | ||
| console.debug(`[tlsx:${category}] ${message}`) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,12 @@ | ||
| import type { CertDetails } from './types'; | ||
|
|
||
| export declare function isCertValidForDomain(certPemOrPath: string, domain: string): boolean; | ||
| export declare function readCertFromFile(certPath: string): string; | ||
| export declare function parseCertDetails(certPemOrPath: string): CertDetails; | ||
| export declare function isCertExpired(certPemOrPath: string): boolean; | ||
| export declare function getCertificateFromCertPemOrPath(certPemOrPath: string): pki.Certificate; | ||
| export declare function listCertsInDirectory(dirPath?: string): string[]; | ||
| export declare function makeNumberPositive(hexString: string): string; | ||
| export declare function findFoldersWithFile(rootDir: string, fileName: string): string[]; | ||
| declare function search(dir: string): void; | ||
| export declare function debugLog(category: string, message: string, verbose?: boolean): void; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.