diff options
| -rw-r--r-- | .gitignore | 4 | ||||
| -rw-r--r-- | background.js | 81 | ||||
| -rw-r--r-- | icons/def.png | bin | 0 -> 914 bytes | |||
| -rw-r--r-- | icons/nope.png | bin | 0 -> 1046 bytes | |||
| -rw-r--r-- | icons/ok.png | bin | 0 -> 992 bytes | |||
| -rw-r--r-- | manifest.json | 31 | ||||
| -rw-r--r-- | updates.json | 13 |
7 files changed, 129 insertions, 0 deletions
diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..41046bf --- /dev/null +++ b/.gitignore @@ -0,0 +1,4 @@ +.DS_Store +*.swp +*.zip +*.xpi diff --git a/background.js b/background.js new file mode 100644 index 0000000..835ee51 --- /dev/null +++ b/background.js @@ -0,0 +1,81 @@ +// Based on https://github.com/mdn/webextensions-examples/blob/main/root-cert-stats/background.js + +// On header receive, inspect cert and update app icon as required +async function onHeaderReceive(details) { + if (details.tabId < 0) // tabId < 0 means non-user tab + return; + + try { + await certInspectUpdate(details.requestId, details.tabId); + } catch(error) { + console.error(error); + } +} + +function daysBetween(a, b) { + return Math.ceil((b - a) / (24 * 60 * 60 * 1000)); +} + +async function certInspectUpdate(requestId, tabId) { + let securityInfo = await browser.webRequest.getSecurityInfo(requestId, {}); + + // Not HTTPS + if (securityInfo.state !== "secure") + return; + + // Grab cert itself + let cert = securityInfo.certificates[0]; + + // Check expiry against 30 days + let in30d = new Date(); + in30d.setDate(in30d.getDate() + 30); + let expiry = new Date(cert.validity.end); + + // HACK: Schedule for this to run after a little later for 'blocking' element + // This is so that main_frame doesn't clear tabId-specific things again + setTimeout(() => { + let bad = expiry <= in30d; + setIcon(bad ? "nope" : "ok", tabId); + + let days = daysBetween(new Date(), expiry); + let daysShort = days + "d"; + if (days > 90) + daysShort = "3m+"; + else if (days > 180) + daysShort = "6m+"; + else if (days > 365) + daysShort = "1y+"; + + // Set expiry days as text + browser.browserAction.setBadgeText({ + text: daysShort, + tabId: tabId + }); + browser.browserAction.setTitle({ + title: "certose - " + cert.issuer + " - " + days + "d to validity end", + tabId: tabId + }); + if (!bad) + browser.browserAction.setBadgeBackgroundColor({ color: "blue" }); + }, 100); +} + +function setIcon(icon, tabId) { + browser.browserAction.setIcon({ + path: "icons/" + icon + ".png", + tabId: tabId + }); +} + +// Listen for all header receive events, which contain the cert details we want +// Firefox only supports onHeadersReceived at the moment, hence the hack above +browser.webRequest.onHeadersReceived.addListener( + onHeaderReceive, + { + urls: ["<all_urls>"], + types: ["main_frame"] // Only for the top level website + }, + [ + "blocking" + ] +); diff --git a/icons/def.png b/icons/def.png Binary files differnew file mode 100644 index 0000000..b0ca670 --- /dev/null +++ b/icons/def.png diff --git a/icons/nope.png b/icons/nope.png Binary files differnew file mode 100644 index 0000000..8d2d5bd --- /dev/null +++ b/icons/nope.png diff --git a/icons/ok.png b/icons/ok.png Binary files differnew file mode 100644 index 0000000..0bdedb7 --- /dev/null +++ b/icons/ok.png diff --git a/manifest.json b/manifest.json new file mode 100644 index 0000000..08eeaa5 --- /dev/null +++ b/manifest.json @@ -0,0 +1,31 @@ +{ + "manifest_version": 2, + "name": "certose", + "description": "Cert-expiry-watching, just like people-watching.", + "author": "Nicholas Tay <nick@windblume.net>", + "version": "0.1.0", + "permissions": [ "webRequest", "webRequestBlocking", "<all_urls>", "storage" ], + "background": { + "scripts": [ "background.js" ] + }, + "icons": { + "32": "icons/def.png" + }, + "browser_action": { + "default_icon": { + "32": "icons/def.png" + } + }, + "browser_specific_settings": { + "gecko": { + "strict_min_version": "62.0", + "id": "certose@nick.windblume.net", + "update_url": "https://git.windblume.net/pub/nick/certose/plain/updates.json" + } + }, + "options_ui": { + "page": "options.html", + "open_in_tab": true, + "browser_style": false + } +} diff --git a/updates.json b/updates.json new file mode 100644 index 0000000..640bde2 --- /dev/null +++ b/updates.json @@ -0,0 +1,13 @@ +{ + "addons": { + "certose@nick.windblume.net": { + "updates": [ + { + "version": "0.1.0", + "update_link": "https://users.windblume.net/~nick/upload/certose_0.1.0.xpi" + } + ] + } + } +} + |
