3 @6^ @s<ddlZddlmZddlmZmZmZGdddeZdS)N)urlparse) SpiderFootSpiderFootPluginSpiderFootEventc@sVeZdZdZdddddZdddd dZd Zefd d Zd dZ ddZ ddZ d S) sfp_sslcertzSSL Certificates:Footprint,Investigate:Crawling and Scanning::Gather information about SSL certificates used by the target's HTTPS sites.T )tryhttpverify ssltimeoutcertexpiringdaysz6Also try to HTTPS-connect to HTTP sites and hostnames.z5Verify certificate subject alternative names resolve.z1Seconds before giving up trying to HTTPS connect.zNNumber of days in the future a certificate expires to consider it as expiring.NcCs8||_|j|_x"t|jD]}|||j|<qWdS)N)sf tempStorageresultslistkeysopts)selfsfcuserOptsoptr6/var/www/spiderfoot.crq.systems/modules/sfp_sslcert.pysetup*s zsfp_sslcert.setupcCs dddgS)N INTERNET_NAMELINKED_URL_INTERNAL IP_ADDRESSr)rrrr watchedEvents6szsfp_sslcert.watchedEventsc Csddddddddd d d d d g S)N TCP_PORT_OPENrINTERNET_NAME_UNRESOLVEDAFFILIATE_INTERNET_NAME"AFFILIATE_INTERNET_NAME_UNRESOLVEDSSL_CERTIFICATE_ISSUEDSSL_CERTIFICATE_ISSUERSSL_CERTIFICATE_MISMATCHSSL_CERTIFICATE_EXPIREDSSL_CERTIFICATE_EXPIRINGSSL_CERTIFICATE_RAW DOMAIN_NAMEAFFILIATE_DOMAIN_NAMEr)rrrrproducedEvents<s zsfp_sslcert.producedEventsc"Cs|j}|j}|j}|jjd|d||dkr|jjd rR|jd rRdSy,t|}d}|j rl|j }|jj |j}Wqt k r}z|jjd|dSd}~XqXn|}d}||j krd|j |<ndS|jjd |d t |yR|jj|||jd } | j| jd} |jj| } |jjt | ||jd } WnBt k r} z$|jjd |dt | ddSd} ~ XnX|d1krtd|d t ||j|}|j|| jds|jjd|dStd| d|j|}|j|| jdrtd| d|j|}|j|| jdrHtd| d|j|}|j||dkr| jdrtddj| jd|j|}|j|xt| jdtD]}|jdd }|jj|dd!rd}nd"}|jd#r|jj| r|jjd$|d%|d&7}t|||j|}|j||jj||jd'r|jd(rVtd)||j|}|j|ntd*||j|}|j|qW| jd+rtd,| jd-d.|j|}|j|dS| jd/rtd0| jd-d.|j|}|j|dSdS)2NzReceived event, z, from rzhttps://r izCouldn't parse URL: TzTesting SSL for: :r r zUnable to SSL-connect to z ()rrrtextz!Failed to parse the SSL cert for r'issuedr"issuerr#mismatchr$z, hostsaltnamesz*.)includeChildrenr r zHost z could not be resolved _UNRESOLVED _internettlds AFFILIATEr)r(expiredr% expirystrUnknownexpiringr&)rr) eventTypemoduledatar debuglower startswithrrporturlFQDN BaseExceptionrstr safeSSLSocket do_handshake getpeercert sslDerToPem parseCertinfor__name__notifyListenersgetjoinsetrreplace getTargetmatches resolveHostisDomain)revent eventName srcModuleName eventDataurBfqdnesockdercertZpemcertcertxevtrawevtsandomainevt_typerrr handleEventEs                      zsfp_sslcert.handleEvent) rL __module__ __qualname____doc__roptdescsrdictrrr*rfrrrrrs  r)time urllib.parsersflibrrrrrrrr s