Function check_in_zone

python3_cron_scripts/zgrab_http_ip.py:126–183

Obtain the DNS names from the common_name and dns_zones from the entry's SSL certificate. Determine if the entry's DNS names is in the list of provided zones. Return the matched zone.

(entry, zones)

def check_in_zone(entry, zones):
    """
    Obtain the DNS names from the common_name and dns_zones from the entry's SSL certificate.
    Determine if the entry's DNS names is in the list of provided zones.
    Return the matched zone.
    """

    if "zgrab2" in global_zgrab_path:
        if "redirect_response_chain" in entry["data"]["http"]["result"]:
            try:
                certificate = entry["data"]["http"]["result"][
                    "redirect_response_chain"
                ][0]["request"]["tls_log"]["handshake_log"]["server_certificates"][
                    "certificate"
                ]
            except:
                return []
        else:
            try:
                certificate = entry["data"]["http"]["result"]["response"]["request"][
                    "tls_log"
                ]["handshake_log"]["server_certificates"]["certificate"]
            except:
                return []
    else:
        if "redirect_response_chain" in entry["data"]["http"]:
            try:
                certificate = entry["data"]["http"]["redirect_response_chain"][0][
                    "request"
                ]["tls_handshake"]["server_certificates"]["certificate"]
            except:
                return []
        else:
            try:
                certificate = entry["data"]["http"]["response"]["request"][
                    "tls_handshake"
                ]["server_certificates"]["certificate"]
            except:
                return []

    try:
        temp1 = certificate["parsed"]["subject"]["common_name"]
    except KeyError:
        temp1 = []

    try:
        temp2 = certificate["parsed"]["extensions"]["subject_alt_name"]["dns_names"]
    except KeyError:
        temp2 = []

    cert_zones = []
    value_array = temp1 + temp2
    for value in value_array:
        zone = zone_compare(value, zones)
        if zone is not None and zone not in cert_zones:
            cert_zones.append(zone)

    return cert_zones