Class: TLSmap::App::Extractor::Testssl

Inherits:
Object
  • Object
show all
Defined in:
lib/tls_map/extractor.rb

Overview

Parsing testssl.sh

Class Method Summary collapse

Class Method Details

.extract_cipher(json_data) ⇒ Array<String>

Extract the ciphers from the testssl output file

Parameters:

  • json_data (Hash)

    Ruby hash of the parsed JSON

Returns:

  • (Array<String>)

    Cipher array (IANA names)



195
196
197
198
199
200
201
202
203
204
205
# File 'lib/tls_map/extractor.rb', line 195

def extract_cipher(json_data)
  cipher = json_data['scanResult'][0]['cipherTests']
  raw = {
    'SSL2.0' => [], 'SSL3.0' => [],
    'TLS1.0' => [], 'TLS1.1' => [], 'TLS1.2' => [], 'TLS1.3' => []
  }
  cipher.each do |node|
    raw[id2prot(node['id'])].push(finding2cipher(node['finding']))
  end
  raw
end

.finding2cipher(finding) ⇒ String

Extract the cipher name from testssl finding

Parameters:

  • finding (String)

    testssl finding

Returns:

  • (String)

    cipher name (IANA names)



222
223
224
# File 'lib/tls_map/extractor.rb', line 222

def finding2cipher(finding)
  /\s(\w+_\w+)\s/.match(finding).captures[0]
end

.id2prot(id) ⇒ String

Convert testssl protocol id to protocol name in TLSmap format

Parameters:

  • id (String)

    testssl protocol id

Returns:

  • (String)

    protocol name in TLSmap format



210
211
212
213
214
215
216
217
# File 'lib/tls_map/extractor.rb', line 210

def id2prot(id)
  prot = {
    'ssl2' => 'SSL2.0', 'ssl3' => 'SSL3.0', 'tls1' => 'TLS1.0',
    'tls1_1' => 'TLS1.1', 'tls1_2' => 'TLS1.2', 'tls1_3' => 'TLS1.3'
  }
  protv = id.match(/cipher-(\w+)_x\w+/).captures[0]
  prot[protv]
end

.parse(file) ⇒ Array<String>

Extract the ciphers from the testssl output file

Parameters:

  • file (String)

    Path of the testssl output file, beware of the format expected. See TLSmap::App::Extractor

Returns:

  • (Array<String>)

    Cipher array (IANA names)



187
188
189
190
# File 'lib/tls_map/extractor.rb', line 187

def parse(file)
  data = Utils.json_load_file(file)
  extract_cipher(data)
end