wehub-resource-sync
57 lines
1.3 KiB
Go
57 lines
1.3 KiB
Go
|
|
package operations
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"fmt"
|
|
"net"
|
|
)
|
|
|
|
// extractSANs extracts Subject Alternative Names from certificate
|
|
func (op *SSLOperation) extractSANs(cert *x509.Certificate) []string {
|
|
sans := make([]string, 0)
|
|
|
|
// Add DNS names
|
|
sans = append(sans, cert.DNSNames...)
|
|
|
|
// Add IP addresses
|
|
for _, ip := range cert.IPAddresses {
|
|
sans = append(sans, ip.String())
|
|
}
|
|
|
|
// Add email addresses
|
|
sans = append(sans, cert.EmailAddresses...)
|
|
|
|
// Add URIs
|
|
for _, uri := range cert.URIs {
|
|
sans = append(sans, uri.String())
|
|
}
|
|
|
|
return sans
|
|
}
|
|
|
|
// getResolvedIP resolves the domain to its IP address
|
|
func (op *SSLOperation) getResolvedIP(hostname string) string {
|
|
ips, err := net.LookupIP(hostname)
|
|
if err != nil || len(ips) == 0 {
|
|
return ""
|
|
}
|
|
return ips[0].String()
|
|
}
|
|
|
|
// getCertificateAlgorithm returns detailed algorithm information
|
|
func (op *SSLOperation) getCertificateAlgorithm(cert *x509.Certificate) string {
|
|
algorithm := cert.SignatureAlgorithm.String()
|
|
|
|
// Add key size information if available
|
|
switch pub := cert.PublicKey.(type) {
|
|
case *rsa.PublicKey:
|
|
algorithm += fmt.Sprintf(" (RSA %d-bit)", pub.N.BitLen())
|
|
case *ecdsa.PublicKey:
|
|
algorithm += fmt.Sprintf(" (ECDSA %d-bit)", pub.Curve.Params().BitSize)
|
|
}
|
|
|
|
return algorithm
|
|
} |