def test_parse_non_sni():
cert_extract = SSLCertificateExtractor()
hostname = "www.google.com"
port = 443
cert_extract.execute(hostname, port)
port = str(port)
assert Loot.loot[hostname][port][cert_extract.loot_name]["Common Name"] == "www.google.com"
def test_no_subject_cert():
cert_extract = SSLCertificateExtractor()
hostname = "no-subject.badssl.com"
port = 443
cert_extract.execute(hostname, port)
port = str(port)
assert Loot.loot[hostname][port][cert_extract.loot_name]["Common Name"] is None
def test_self_signed_cert():
cert_extract = SSLCertificateExtractor()
hostname = "self-signed.badssl.com"
port = 443
cert_extract.execute(hostname, port)
port = str(port)
assert "badssl.com" in Loot.loot[hostname][port][cert_extract.loot_name]["Common Name"]
def test_expired_cert():
cert_extract = SSLCertificateExtractor()
hostname = "expired.badssl.com"
port = 443
cert_extract.execute(hostname, port)
port = str(port)
assert Loot.loot[hostname][port][cert_extract.loot_name]["Expired"] is True
def test_parse_sni():
cert_extract = SSLCertificateExtractor()
hostname = "www.facepunch.com"
port = 443
cert_extract.execute(hostname, port)
port = str(port)
assert "cloudflaressl.com" in Loot.loot[hostname][port][cert_extract.loot_name]["Common Name"]
def test_disabled_config():
module = SSLCertificateExtractor()
if module.name not in config.config:
config.config.add_section(module.name)
config.config.set(module.name, "enabled", "no")
result = module.should_execute("https", 443)
config.config.set(module.name, "enabled", "yes")
assert result is False
def test_non_https():
cert_extract = SSLCertificateExtractor()
hostname = "httpforever.com"
port = 80
Loot.reset()
Loot.loot[hostname] = {}
cert_extract.execute(hostname, port)
port = str(port)
assert port not in Loot.loot[hostname]
def test_should_not_run():
cert_extract = SSLCertificateExtractor()
result = cert_extract.should_execute("http", 80)
assert result is False
def test_should_run_alt_port():
cert_extract = SSLCertificateExtractor()
result = cert_extract.should_execute("secure-http", 8443)
assert result is True
def test_should_execute_service_https_alt():
cert_extract = SSLCertificateExtractor()
assert cert_extract.should_execute("https-alt", 1337) is True
def test_should_run_service_https():
cert_extract = SSLCertificateExtractor()
result = cert_extract.should_execute("https", 4433)
assert result is True
def test_module_creation():
cert_extract = SSLCertificateExtractor()
assert cert_extract is not None