seer-cli 0.56.0

Interactive CLI for Seer domain name utilities
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

//! SSL/Cert lens — certificate summary, posture warnings + SANs.
use ratatui::text::Line;
use seer_core::CertWarningSeverity;

use crate::tui::action::LensData;
use crate::tui::theme::Theme;
use crate::tui::widgets::page::{Block, Page};
use crate::tui::widgets::{chips, dot, or_dash};

pub fn page(theme: &Theme, data: &LensData) -> Option<Page> {
    let LensData::Ssl(s) = data else {
        return None;
    };
    let leaf = s.chain.first();
    let valid = if s.is_valid { "yes" } else { "no" };
    let hostname = if s.hostname_verified {
        "verified"
    } else {
        "MISMATCH"
    };
    let rows = vec![
        ("domain", s.domain.clone()),
        ("subject", or_dash(leaf.map(|c| &c.subject))),
        ("issuer", or_dash(leaf.map(|c| &c.issuer))),
        ("key", or_dash(leaf.and_then(|c| c.key_type.as_deref()))),
        ("valid", valid.to_string()),
        ("hostname", hostname.to_string()),
        ("expires in", format!("{}d", s.days_until_expiry)),
    ];
    // One line per posture warning.
    let warnings: Vec<Line<'static>> = s
        .warnings
        .iter()
        .map(|w| {
            let tone = match w.severity {
                CertWarningSeverity::Critical => "fail",
                CertWarningSeverity::Warning => "warn",
            };
            dot::line(theme, tone, w.message.clone())
        })
        .collect();
    Some(
        Page::new("Certificate", theme.green)
            .push(Block::Kv {
                key_color: theme.green,
                rows,
            })
            .push_if(!warnings.is_empty(), || Block::Lines(warnings))
            .push(Block::Gap)
            .push(Block::Lines(vec![chips::line(theme, &s.san_names)])),
    )
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::tui::widgets::page;

    /// Draw this lens's page as the TUI does.
    fn render(f: &mut ratatui::Frame, area: ratatui::layout::Rect, theme: &Theme, data: &LensData) {
        if let Some(p) = page(theme, data) {
            page::draw(f, area, theme, p, false);
        }
    }
    use crate::tui::test_util::render_lines;
    use seer_core::SslReport;

    fn ssl_fixture() -> SslReport {
        SslReport {
            domain: "example.com".into(),
            chain: vec![],
            protocol_version: None,
            san_names: vec!["example.com".into(), "*.example.com".into()],
            is_valid: true,
            hostname_verified: true,
            days_until_expiry: 225,
            caa: None,
            warnings: vec![],
        }
    }

    fn render_to_text(data: &LensData, width: u16, height: u16) -> String {
        let theme = Theme::frappe();
        render_lines(width, height, |f| render(f, f.area(), &theme, data))
    }

    #[test]
    fn renders_expiry_days() {
        let data = LensData::Ssl(Box::new(ssl_fixture()));
        let s = render_to_text(&data, 60, 12);
        assert!(s.contains("225"));
    }

    #[test]
    fn renders_hostname_verification_state() {
        let data = LensData::Ssl(Box::new(ssl_fixture()));
        let s = render_to_text(&data, 60, 12);
        assert!(s.contains("hostname"), "got: {s}");
        assert!(s.contains("verified"), "got: {s}");

        let mut report = ssl_fixture();
        report.hostname_verified = false;
        let s = render_to_text(&LensData::Ssl(Box::new(report)), 60, 12);
        assert!(s.contains("MISMATCH"), "got: {s}");
    }

    #[test]
    fn renders_cert_warnings() {
        use seer_core::{CertWarning, CertWarningKind, CertWarningSeverity};
        let mut report = ssl_fixture();
        report.warnings = vec![
            CertWarning {
                severity: CertWarningSeverity::Critical,
                kind: CertWarningKind::WeakKey,
                message: "weak RSA key (1024 bits)".into(),
            },
            CertWarning {
                severity: CertWarningSeverity::Warning,
                kind: CertWarningKind::SelfSigned,
                message: "certificate is self-signed".into(),
            },
        ];
        let s = render_to_text(&LensData::Ssl(Box::new(report)), 70, 16);
        assert!(s.contains("weak RSA key"), "got: {s}");
        assert!(s.contains("self-signed"), "got: {s}");
    }
}