b9a2e73e33
There was some problem with my editor and lost some code, this work is fixing that and adding new features. Current state of the code: * capturing CertStream traffic * saving raw certstream objects in a custom wrapper * extracting fingerprints and domains from the certstream object * saving fingerprints and domains nodes and edges between them. * fingerprint is linked to the raw certstream object with an edge * saving to files with customizable names (raw in code) broker: * kafka connection and test * no sending of data to it for the moment
53 lines
1.4 KiB
Go
53 lines
1.4 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/CaliDog/certstream-go"
|
|
"github.com/sirupsen/logrus"
|
|
"gitlab.dcso.lolcat/LABS/styx/broker"
|
|
"gitlab.dcso.lolcat/LABS/styx/models"
|
|
)
|
|
|
|
func main() {
|
|
// The false flag specifies that we want heartbeat messages.
|
|
stream, errStream := certstream.CertStreamEventStream(false)
|
|
fmt.Println("Starting to get data from CertStream...")
|
|
Conn, err := broker.SetUpKafkaConnecter()
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
go broker.ReadEventFromKafka()
|
|
// certstream
|
|
for {
|
|
select {
|
|
case jq := <-stream:
|
|
if data, err := models.ExtractCertFromStream(jq); err == nil {
|
|
|
|
rawNode := models.WrapCertStreamData(*data)
|
|
models.SaveRaw("raw_certstream.json", rawNode)
|
|
|
|
fingerprintNode := models.BuildNode("certstream", "fingerprint", data.Data.LeafCert.Fingerprint)
|
|
models.SaveNode("nodes.json", fingerprintNode)
|
|
models.BuildEdge("certstream", rawNode.ID, fingerprintNode.ID)
|
|
fmt.Println(fingerprintNode)
|
|
allDomains := data.Data.LeafCert.AllDomains
|
|
var edge *models.Edge
|
|
for _, domain := range allDomains {
|
|
domainNode := models.BuildNode("certstream", "domain", domain)
|
|
models.SaveNode("nodes.json", domainNode)
|
|
edge = models.BuildEdge("certstream", fingerprintNode.ID, domainNode.ID)
|
|
fmt.Println(edge)
|
|
models.SaveEdge(edge)
|
|
|
|
}
|
|
broker.SendEventToKafka(Conn, *fingerprintNode)
|
|
}
|
|
|
|
case err := <-errStream:
|
|
logrus.Error(err)
|
|
}
|
|
}
|
|
|
|
// pastebin
|
|
}
|