seer-cli 0.51.0

Interactive CLI for Seer domain name utilities
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

//! SSL/Cert lens — certificate summary, posture warnings + SANs.
use ratatui::layout::{Constraint, Direction, Layout, Rect};
use ratatui::text::Line;
use ratatui::Frame;
use seer_core::CertWarningSeverity;

use crate::tui::action::LensData;
use crate::tui::theme::Theme;
use crate::tui::widgets::{chips, dot, kv, or_dash, panel};
use ratatui::widgets::Paragraph;

pub fn render(f: &mut Frame, area: Rect, theme: &Theme, data: &LensData) {
    let LensData::Ssl(s) = data else { return };
    let inner = panel::render(f, area, theme, "Certificate", theme.green, false);

    let chunks = Layout::default()
        .direction(Direction::Vertical)
        .constraints([
            Constraint::Min(0),
            // One line per posture warning (zero-height when clean).
            Constraint::Length(s.warnings.len() as u16),
            Constraint::Length(2),
        ])
        .split(inner);

    let leaf = s.chain.first();
    let valid = if s.is_valid { "yes" } else { "no" };
    let hostname = if s.hostname_verified {
        "verified"
    } else {
        "MISMATCH"
    };
    let rows = [
        ("domain", s.domain.clone()),
        ("subject", or_dash(leaf.map(|c| &c.subject))),
        ("issuer", or_dash(leaf.map(|c| &c.issuer))),
        ("key", or_dash(leaf.and_then(|c| c.key_type.as_deref()))),
        ("valid", valid.to_string()),
        ("hostname", hostname.to_string()),
        ("expires in", format!("{}d", s.days_until_expiry)),
    ];
    kv::render(f, chunks[0], theme, theme.green, &rows);
    if !s.warnings.is_empty() {
        let lines: Vec<Line> = s
            .warnings
            .iter()
            .map(|w| {
                let tone = match w.severity {
                    CertWarningSeverity::Critical => "fail",
                    CertWarningSeverity::Warning => "warn",
                };
                dot::line(theme, tone, w.message.clone())
            })
            .collect();
        f.render_widget(Paragraph::new(lines), chunks[1]);
    }
    f.render_widget(Paragraph::new(chips::line(theme, &s.san_names)), chunks[2]);
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::tui::test_util::render_lines;
    use seer_core::SslReport;

    fn ssl_fixture() -> SslReport {
        SslReport {
            domain: "example.com".into(),
            chain: vec![],
            protocol_version: None,
            san_names: vec!["example.com".into(), "*.example.com".into()],
            is_valid: true,
            hostname_verified: true,
            days_until_expiry: 225,
            caa: None,
            warnings: vec![],
        }
    }

    fn render_to_text(data: &LensData, width: u16, height: u16) -> String {
        let theme = Theme::frappe();
        render_lines(width, height, |f| render(f, f.area(), &theme, data))
    }

    #[test]
    fn renders_expiry_days() {
        let data = LensData::Ssl(Box::new(ssl_fixture()));
        let s = render_to_text(&data, 60, 12);
        assert!(s.contains("225"));
    }

    #[test]
    fn renders_hostname_verification_state() {
        let data = LensData::Ssl(Box::new(ssl_fixture()));
        let s = render_to_text(&data, 60, 12);
        assert!(s.contains("hostname"), "got: {s}");
        assert!(s.contains("verified"), "got: {s}");

        let mut report = ssl_fixture();
        report.hostname_verified = false;
        let s = render_to_text(&LensData::Ssl(Box::new(report)), 60, 12);
        assert!(s.contains("MISMATCH"), "got: {s}");
    }

    #[test]
    fn renders_cert_warnings() {
        use seer_core::{CertWarning, CertWarningSeverity};
        let mut report = ssl_fixture();
        report.warnings = vec![
            CertWarning {
                severity: CertWarningSeverity::Critical,
                message: "weak RSA key (1024 bits)".into(),
            },
            CertWarning {
                severity: CertWarningSeverity::Warning,
                message: "certificate is self-signed".into(),
            },
        ];
        let s = render_to_text(&LensData::Ssl(Box::new(report)), 70, 16);
        assert!(s.contains("weak RSA key"), "got: {s}");
        assert!(s.contains("self-signed"), "got: {s}");
    }
}