mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-11-05 15:33:42 +01:00
a5ec045000
allow to run the analysis of certificate chains later after the data was collected, allows also for re-analysis of archival data
48 lines
1.1 KiB
Bash
Executable File
48 lines
1.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
if [ ! -d ./ca_files ]; then
|
|
echo "Directory with collected CA certificates missing!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -d ./ca_trusted ]; then
|
|
echo "Directory with just trust anchors missing!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -d ./certs ]; then
|
|
echo "Directory with certificates missing!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if ! ls -f ./ca_files/????????.? > /dev/null; then
|
|
echo "CA certificates directory not hashed properly (use c_rehash)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if ! ls -f ./ca_trusted/????????.? > /dev/null; then
|
|
echo "Directory with trust anchors not hashed properly (use c_rehash)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -d ./results ]; then
|
|
echo "Directory with scan results missing!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -x ./parse_CAs ]; then
|
|
echo "Compiling parse_CAs script"
|
|
gcc -o parse_CAs parse_CAs.c -lssl -lcrypto -ljson-c --std=gnu99
|
|
if [ $? -ne 0 ]; then
|
|
echo "Compilation failed, aborting" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
echo "Verifying certificate chains from results files"
|
|
./parse_CAs "$@" > parsed
|
|
echo "Calculating statistics for verified certificate chains"
|
|
python parse_CAs.py > trust_scan
|
|
echo "Done!"
|
|
echo "Results are in \"trust_scan\" file"
|