Skip to content
This repository has been archived by the owner on Dec 16, 2022. It is now read-only.

Objects xpcshell_worker.Response scan command

Christiane Ruetten edited this page Jul 7, 2017 · 3 revisions

This is an sample of a scan result returned by an xpcshell worker that includes DER certificate data. The raw DER bytes of the certificate chain have been stripped for brevity.

There is some natural variation to deeper data structures that originate in XPCShell. There is also significant variation especially in the the ssl_status and other connection info keys depending on the server's SSL connection state.

{
    "host": "outlook.com", 
    "rank": 138, 
    "response": {
        "command_time": 1499422585047, 
        "id": 8701021541902645000, 
        "original_cmd": {
            "args": {
                "host": "outlook.com", 
                "include_certificates": true, 
                "rank": 138, 
                "timeout": 10
            }, 
            "id": null, 
            "mode": "scan"
        }, 
        "response_time": 1499422586076, 
        "result": {
            "info": {
                "certificate_chain": [
                    [48, 130, 6, 230, "DER data bytes..."], 
                    [48, 130, 6, 230, "DER data bytes..."]
                ], 
                "certificate_chain_length": 2, 
                "certified_usages": null, 
                "error_class": null, 
                "original_uri": "https://outlook.com/", 
                "raw_error": "", 
                "security_info_status": true, 
                "security_state": 262146, 
                "ssl_status": {
                    "CERTIFICATE_TRANSPARENCY_NOT_APPLICABLE": 0, 
                    "CERTIFICATE_TRANSPARENCY_POLICY_COMPLIANT": 5, 
                    "CERTIFICATE_TRANSPARENCY_POLICY_NOT_DIVERSE_SCTS": 7, 
                    "CERTIFICATE_TRANSPARENCY_POLICY_NOT_ENOUGH_SCTS": 6, 
                    "SSL_VERSION_3": 0, 
                    "TLS_VERSION_1": 1, 
                    "TLS_VERSION_1_1": 2, 
                    "TLS_VERSION_1_2": 3, 
                    "TLS_VERSION_1_3": 4, 
                    "certificateTransparencyStatus": 0, 
                    "cipherName": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", 
                    "isDomainMismatch": false, 
                    "isExtendedValidation": false, 
                    "isNotValidAtThisTime": false, 
                    "isUntrusted": false, 
                    "keyLength": 128, 
                    "protocolVersion": 3, 
                    "secretKeyLength": 128, 
                    "serverCert": {
                        "ANY_CERT": 65535, 
                        "ASN1Structure": {
                            "ASN1_APPLICATION": 33, 
                            "ASN1_BIT_STRING": 3, 
                            "ASN1_BMP_STRING": 30, 
                            "ASN1_BOOLEAN": 1, 
                            "ASN1_CONTEXT_SPECIFIC": 32, 
                            "ASN1_END_CONTENTS": 0, 
                            "ASN1_ENUMERATED": 10, 
                            "ASN1_GEN_TIME": 24, 
                            "ASN1_HIGH_TAG_NUMBER": 31, 
                            "ASN1_IA5_STRING": 22, 
                            "ASN1_INTEGER": 2, 
                            "ASN1_NULL": 5, 
                            "ASN1_OBJECT_ID": 6, 
                            "ASN1_OCTET_STRING": 4, 
                            "ASN1_PRINTABLE_STRING": 19, 
                            "ASN1_PRIVATE": 34, 
                            "ASN1_SEQUENCE": 16, 
                            "ASN1_SET": 17, 
                            "ASN1_T61_STRING": 20, 
                            "ASN1_UNIVERSAL_STRING": 28, 
                            "ASN1_UTC_TIME": 23, 
                            "ASN1_UTF8_STRING": 12, 
                            "ASN1_VISIBLE_STRING": 26, 
                            "displayName": "outlook.com", 
                            "displayValue": "", 
                            "tag": 0, 
                            "type": 0
                        }, 
                        "CA_CERT": 1, 
                        "CMS_CHAIN_MODE_CertChain": 2, 
                        "CMS_CHAIN_MODE_CertChainWithRoot": 3, 
                        "CMS_CHAIN_MODE_CertOnly": 1, 
                        "EMAIL_CERT": 4, 
                        "SERVER_CERT": 8, 
                        "UNKNOWN_CERT": 0, 
                        "USER_CERT": 2, 
                        "certType": 0, 
                        "commonName": "outlook.com", 
                        "dbKey": "AAAAAAAAAAAAAAAQAAAATQhJNUEJdeQT6/B0u3QM6UIwSzELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzElMCMGA1UEAxMcRGlnaUNlcnQgQ2xvdWQgU2VydmljZXMgQ0EtMQ==", 
                        "displayName": "outlook.com", 
                        "emailAddress": "(no email address)", 
                        "isBuiltInRoot": false, 
                        "isSelfSigned": false, 
                        "issuer": null, 
                        "issuerCommonName": "DigiCert Cloud Services CA-1", 
                        "issuerName": "CN=DigiCert Cloud Services CA-1,O=DigiCert Inc,C=US", 
                        "issuerOrganization": "DigiCert Inc", 
                        "issuerOrganizationUnit": "", 
                        "keyUsages": "Signing,Key Encipherment", 
                        "organization": "Microsoft Corporation", 
                        "organizationalUnit": "", 
                        "serialNumber": "08:49:35:41:09:75:E4:13:EB:F0:74:BB:74:0C:E9:42", 
                        "sha1Fingerprint": "69:1A:C3:44:96:25:2F:00:DD:4B:E7:2F:97:AE:4A:8E:48:DF:6B:F5", 
                        "sha256Fingerprint": "62:DF:53:CE:C2:5A:40:D4:E4:D7:C8:56:8C:C4:0D:45:33:36:B2:7E:4E:0D:4F:D2:EC:42:09:72:22:0F:12:06", 
                        "sha256SubjectPublicKeyInfoDigest": "fJszJSOvKYW9tXnhjJmoqgJK0TxtDVYHgpLJVaf1A9I=", 
                        "subjectName": "CN=outlook.com,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US", 
                        "tokenName": "Software Security Device", 
                        "validity": {
                            "notAfter": 1522756800000000, 
                            "notAfterGMT": "3 April 2018, 12:00:00 GMT", 
                            "notAfterLocalDay": "3 April 2018", 
                            "notAfterLocalTime": "3 April 2018, 14:00:00 GMT+2", 
                            "notBefore": 1491177600000000, 
                            "notBeforeGMT": "3 April 2017, 00:00:00 GMT", 
                            "notBeforeLocalDay": "3 April 2017", 
                            "notBeforeLocalTime": "3 April 2017, 02:00:00 GMT+2"
                        }
                    }
                }, 
                "ssl_status_errors": [], 
                "ssl_status_status": true, 
                "status": 0, 
                "transport_security_info_status": true, 
                "uri": "https://outlook.com/"
            }, 
            "origin": "error_handler"
        }, 
        "success": false, 
        "worker_id": 15634279826047433000
    }, 
    "success": true
}