summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.gitignore4
-rw-r--r--background.js81
-rw-r--r--icons/def.pngbin0 -> 914 bytes
-rw-r--r--icons/nope.pngbin0 -> 1046 bytes
-rw-r--r--icons/ok.pngbin0 -> 992 bytes
-rw-r--r--manifest.json31
-rw-r--r--updates.json13
7 files changed, 129 insertions, 0 deletions
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..41046bf
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,4 @@
+.DS_Store
+*.swp
+*.zip
+*.xpi
diff --git a/background.js b/background.js
new file mode 100644
index 0000000..835ee51
--- /dev/null
+++ b/background.js
@@ -0,0 +1,81 @@
+// Based on https://github.com/mdn/webextensions-examples/blob/main/root-cert-stats/background.js
+
+// On header receive, inspect cert and update app icon as required
+async function onHeaderReceive(details) {
+ if (details.tabId < 0) // tabId < 0 means non-user tab
+ return;
+
+ try {
+ await certInspectUpdate(details.requestId, details.tabId);
+ } catch(error) {
+ console.error(error);
+ }
+}
+
+function daysBetween(a, b) {
+ return Math.ceil((b - a) / (24 * 60 * 60 * 1000));
+}
+
+async function certInspectUpdate(requestId, tabId) {
+ let securityInfo = await browser.webRequest.getSecurityInfo(requestId, {});
+
+ // Not HTTPS
+ if (securityInfo.state !== "secure")
+ return;
+
+ // Grab cert itself
+ let cert = securityInfo.certificates[0];
+
+ // Check expiry against 30 days
+ let in30d = new Date();
+ in30d.setDate(in30d.getDate() + 30);
+ let expiry = new Date(cert.validity.end);
+
+ // HACK: Schedule for this to run after a little later for 'blocking' element
+ // This is so that main_frame doesn't clear tabId-specific things again
+ setTimeout(() => {
+ let bad = expiry <= in30d;
+ setIcon(bad ? "nope" : "ok", tabId);
+
+ let days = daysBetween(new Date(), expiry);
+ let daysShort = days + "d";
+ if (days > 90)
+ daysShort = "3m+";
+ else if (days > 180)
+ daysShort = "6m+";
+ else if (days > 365)
+ daysShort = "1y+";
+
+ // Set expiry days as text
+ browser.browserAction.setBadgeText({
+ text: daysShort,
+ tabId: tabId
+ });
+ browser.browserAction.setTitle({
+ title: "certose - " + cert.issuer + " - " + days + "d to validity end",
+ tabId: tabId
+ });
+ if (!bad)
+ browser.browserAction.setBadgeBackgroundColor({ color: "blue" });
+ }, 100);
+}
+
+function setIcon(icon, tabId) {
+ browser.browserAction.setIcon({
+ path: "icons/" + icon + ".png",
+ tabId: tabId
+ });
+}
+
+// Listen for all header receive events, which contain the cert details we want
+// Firefox only supports onHeadersReceived at the moment, hence the hack above
+browser.webRequest.onHeadersReceived.addListener(
+ onHeaderReceive,
+ {
+ urls: ["<all_urls>"],
+ types: ["main_frame"] // Only for the top level website
+ },
+ [
+ "blocking"
+ ]
+);
diff --git a/icons/def.png b/icons/def.png
new file mode 100644
index 0000000..b0ca670
--- /dev/null
+++ b/icons/def.png
Binary files differ
diff --git a/icons/nope.png b/icons/nope.png
new file mode 100644
index 0000000..8d2d5bd
--- /dev/null
+++ b/icons/nope.png
Binary files differ
diff --git a/icons/ok.png b/icons/ok.png
new file mode 100644
index 0000000..0bdedb7
--- /dev/null
+++ b/icons/ok.png
Binary files differ
diff --git a/manifest.json b/manifest.json
new file mode 100644
index 0000000..08eeaa5
--- /dev/null
+++ b/manifest.json
@@ -0,0 +1,31 @@
+{
+ "manifest_version": 2,
+ "name": "certose",
+ "description": "Cert-expiry-watching, just like people-watching.",
+ "author": "Nicholas Tay <nick@windblume.net>",
+ "version": "0.1.0",
+ "permissions": [ "webRequest", "webRequestBlocking", "<all_urls>", "storage" ],
+ "background": {
+ "scripts": [ "background.js" ]
+ },
+ "icons": {
+ "32": "icons/def.png"
+ },
+ "browser_action": {
+ "default_icon": {
+ "32": "icons/def.png"
+ }
+ },
+ "browser_specific_settings": {
+ "gecko": {
+ "strict_min_version": "62.0",
+ "id": "certose@nick.windblume.net",
+ "update_url": "https://git.windblume.net/pub/nick/certose/plain/updates.json"
+ }
+ },
+ "options_ui": {
+ "page": "options.html",
+ "open_in_tab": true,
+ "browser_style": false
+ }
+}
diff --git a/updates.json b/updates.json
new file mode 100644
index 0000000..640bde2
--- /dev/null
+++ b/updates.json
@@ -0,0 +1,13 @@
+{
+ "addons": {
+ "certose@nick.windblume.net": {
+ "updates": [
+ {
+ "version": "0.1.0",
+ "update_link": "https://users.windblume.net/~nick/upload/certose_0.1.0.xpi"
+ }
+ ]
+ }
+ }
+}
+