jupyter/site_health.ipynb

{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": 2,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "host name ? (example github.com) \n",
      "answers.notnoob.com\n",
      "port ? \n",
      "9000\n",
      "__LOOKUP____________________________________________\n",
      "ip: 202.157.177.156\n",
      "FQDN: answers.notnoob.com\n",
      "202.157.177.156\n",
      "\n",
      "\n",
      "__PING INFO____________________________________________\n",
      "server answers.notnoob.com: is up \n",
      "__SSL/TLS INFO____________________________________________\n",
      "http code:200\n"
     ]
    },
    {
     "ename": "ConnectionRefusedError",
     "evalue": "[Errno 111] Connection refused",
     "output_type": "error",
     "traceback": [
      "\u001b[0;31m---------------------------------------------------------------------------\u001b[0m",
      "\u001b[0;31mConnectionRefusedError\u001b[0m                    Traceback (most recent call last)",
      "\u001b[0;32m<ipython-input-2-1d45726fec5d>\u001b[0m in \u001b[0;36m<module>\u001b[0;34m\u001b[0m\n\u001b[1;32m    106\u001b[0m     \u001b[0mprt\u001b[0m \u001b[0;34m=\u001b[0m \u001b[0minput\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m\"port ? \\n\"\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m    107\u001b[0m     \u001b[0mtcp_it\u001b[0m \u001b[0;34m=\u001b[0m \u001b[0;34m\"https\"\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0;32m--> 108\u001b[0;31m     \u001b[0mserverHealthCheck\u001b[0m \u001b[0;34m=\u001b[0m \u001b[0mServerHealthCheck\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0mhost_name\u001b[0m\u001b[0;34m,\u001b[0m \u001b[0mprt\u001b[0m\u001b[0;34m,\u001b[0m \u001b[0mtcp_it\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0m",
      "\u001b[0;32m<ipython-input-2-1d45726fec5d>\u001b[0m in \u001b[0;36m__init__\u001b[0;34m(self, base_url, port, tcp)\u001b[0m\n\u001b[1;32m     20\u001b[0m         \u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mping_host\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m     21\u001b[0m         \u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mobtain_http_info\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0;32m---> 22\u001b[0;31m         \u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mobtain_cert_info\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0m\u001b[1;32m     23\u001b[0m \u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m     24\u001b[0m     \u001b[0;32mdef\u001b[0m \u001b[0mobtain_ip\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0mself\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n",
      "\u001b[0;32m<ipython-input-2-1d45726fec5d>\u001b[0m in \u001b[0;36mobtain_cert_info\u001b[0;34m(self)\u001b[0m\n\u001b[1;32m     65\u001b[0m     \u001b[0;32mdef\u001b[0m \u001b[0mobtain_cert_info\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0mself\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m     66\u001b[0m         \u001b[0mcontext\u001b[0m \u001b[0;34m=\u001b[0m \u001b[0mssl\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mcreate_default_context\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0;32m---> 67\u001b[0;31m         \u001b[0;32mwith\u001b[0m \u001b[0msocket\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mcreate_connection\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mbase_url\u001b[0m\u001b[0;34m,\u001b[0m \u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mport\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m)\u001b[0m \u001b[0;32mas\u001b[0m \u001b[0msocket_connection\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0m\u001b[1;32m     68\u001b[0m             \u001b[0;32mwith\u001b[0m \u001b[0mcontext\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mwrap_socket\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0msocket_connection\u001b[0m\u001b[0;34m,\u001b[0m \u001b[0mserver_hostname\u001b[0m\u001b[0;34m=\u001b[0m\u001b[0mself\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mbase_url\u001b[0m\u001b[0;34m)\u001b[0m \u001b[0;32mas\u001b[0m \u001b[0mserver_socket\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m     69\u001b[0m                 \u001b[0;31m# uncomment to print everything\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n",
      "\u001b[0;32m~/anaconda3/lib/python3.6/socket.py\u001b[0m in \u001b[0;36mcreate_connection\u001b[0;34m(address, timeout, source_address)\u001b[0m\n\u001b[1;32m    722\u001b[0m \u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m    723\u001b[0m     \u001b[0;32mif\u001b[0m \u001b[0merr\u001b[0m \u001b[0;32mis\u001b[0m \u001b[0;32mnot\u001b[0m \u001b[0;32mNone\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0;32m--> 724\u001b[0;31m         \u001b[0;32mraise\u001b[0m \u001b[0merr\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0m\u001b[1;32m    725\u001b[0m     \u001b[0;32melse\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m    726\u001b[0m         \u001b[0;32mraise\u001b[0m \u001b[0merror\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0;34m\"getaddrinfo returns an empty list\"\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n",
      "\u001b[0;32m~/anaconda3/lib/python3.6/socket.py\u001b[0m in \u001b[0;36mcreate_connection\u001b[0;34m(address, timeout, source_address)\u001b[0m\n\u001b[1;32m    711\u001b[0m             \u001b[0;32mif\u001b[0m \u001b[0msource_address\u001b[0m\u001b[0;34m:\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m    712\u001b[0m                 \u001b[0msock\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mbind\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0msource_address\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0;32m--> 713\u001b[0;31m             \u001b[0msock\u001b[0m\u001b[0;34m.\u001b[0m\u001b[0mconnect\u001b[0m\u001b[0;34m(\u001b[0m\u001b[0msa\u001b[0m\u001b[0;34m)\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[0m\u001b[1;32m    714\u001b[0m             \u001b[0;31m# Break explicitly a reference cycle\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n\u001b[1;32m    715\u001b[0m             \u001b[0merr\u001b[0m \u001b[0;34m=\u001b[0m \u001b[0;32mNone\u001b[0m\u001b[0;34m\u001b[0m\u001b[0;34m\u001b[0m\u001b[0m\n",
      "\u001b[0;31mConnectionRefusedError\u001b[0m: [Errno 111] Connection refused"
     ]
    }
   ],
   "source": [
    "#! /usr/bin/env python\n",
    "\"\"\"This script is very useful for when you just to do a health check on a remote server. It does the followings:\n",
    "  - NSLOOKUP \n",
    "  - PING to see if the site is up \n",
    "  - Certificate/SSL/TLS info \"\"\"\n",
    "import hashlib\n",
    "import os\n",
    "from urllib.error import URLError, HTTPError\n",
    "from urllib.request import Request, urlopen, ssl, socket\n",
    "\n",
    "\n",
    "class ServerHealthCheck():\n",
    "\n",
    "    def __init__(self, base_url, port, tcp):\n",
    "        self.base_url = base_url\n",
    "        self.ip_now = self.obtain_ip()\n",
    "        self.port = port\n",
    "        self.tcp = tcp\n",
    "        self.url_path = self.tcp + \"://\" + base_url\n",
    "        self.ping_host()\n",
    "        self.obtain_http_info()\n",
    "        self.obtain_cert_info()\n",
    "\n",
    "    def obtain_ip(self):\n",
    "        print(\"__LOOKUP____________________________________________\")\n",
    "        currnet_ip = socket.gethostbyname(self.base_url)\n",
    "        print(\"ip: \" + currnet_ip)\n",
    "        print(\"FQDN: \" + socket.getfqdn(self.base_url))\n",
    "        distinct_ips = []\n",
    "        # 0,0,0,0  is for (family, type, proto, canonname, sockaddr)\n",
    "        socket_info = socket.getaddrinfo(self.base_url, 0, 0, 0, 0)\n",
    "        for result in socket_info:\n",
    "            ns_ip = result[4][0]\n",
    "            if distinct_ips.count(ns_ip) == 0:\n",
    "                distinct_ips.append(ns_ip)\n",
    "                print(ns_ip)\n",
    "        distinct_ips = list(set(distinct_ips))\n",
    "        return currnet_ip\n",
    "\n",
    "    def ping_host(self):\n",
    "        # ping reesult\n",
    "        print(\"\\n\\n\" + \"__PING INFO____________________________________________\")\n",
    "        response = os.system(\"ping -c 1 \" + self.ip_now)\n",
    "        # and then check the response...\n",
    "        if response == 0:\n",
    "            print(\"server \" + self.base_url + \": is up \")\n",
    "        else:\n",
    "            print(\"server \" + self.base_url + \": is DOWN !!!\")\n",
    "\n",
    "    def obtain_http_info(self):\n",
    "        print(\"__SSL/TLS INFO____________________________________________\")\n",
    "        req = Request(self.url_path)\n",
    "        try:\n",
    "            response = urlopen(req, context=ssl._create_unverified_context())\n",
    "            # htmlSource = response.read()\n",
    "        except HTTPError as e:\n",
    "            print('The server couldn\\'t fulfill the request.')\n",
    "            print('Error code: ', e.code)\n",
    "        except URLError as e:\n",
    "            print('We failed to reach a server.')\n",
    "            print('Reason: ', e.reason)\n",
    "        else:\n",
    "            print(\"http code:\" + str(response.getcode()))\n",
    "\n",
    "    def obtain_cert_info(self):\n",
    "        context = ssl.create_default_context()\n",
    "        with socket.create_connection((self.base_url, self.port)) as socket_connection:\n",
    "            with context.wrap_socket(socket_connection, server_hostname=self.base_url) as server_socket:\n",
    "                # uncomment to print everything\n",
    "                # print(json.dumps(server_socket.getpeercert() , indent=2, sort_keys=True))\n",
    "                cert_info = server_socket.getpeercert()\n",
    "                subject = dict(x[0] for x in cert_info['subject'])\n",
    "                issued_to = subject['commonName']\n",
    "                issuer = dict(x[0] for x in cert_info['issuer'])\n",
    "                issued_by = issuer['commonName']\n",
    "                valid_from = cert_info['notBefore']\n",
    "                valid_to = cert_info['notAfter']\n",
    "                serial_number = cert_info['serialNumber']\n",
    "                der_cert = server_socket.getpeercert(False)\n",
    "                der_cert_bin = server_socket.getpeercert(True)\n",
    "                pem_cert = ssl.DER_cert_to_PEM_cert(server_socket.getpeercert(True))\n",
    "                # uncomment the below line if you want to see the actual public cert\n",
    "                # print(\"certificate pub:\",pem_cert)\n",
    "                thumb_md5 = hashlib.md5(der_cert_bin).hexdigest()\n",
    "                thumb_sha1 = hashlib.sha1(der_cert_bin).hexdigest()\n",
    "                thumb_sha256 = hashlib.sha256(der_cert_bin).hexdigest()\n",
    "                print(\"issued_to: \" + issued_to)\n",
    "                print(\"issued_by: \" + issued_by)\n",
    "                print(\"valid_from: \" + valid_from)\n",
    "                print(\"valid_to: \" + valid_from)\n",
    "                print(\"MD5: \" + thumb_md5)\n",
    "                print(\"SHA1: \" + thumb_sha1)\n",
    "                print(\"SHA256: \" + thumb_sha256)\n",
    "                print(\"cipher: \" + str(server_socket.cipher()))\n",
    "                print(\"SSL/TLS version:  \" + server_socket.version())\n",
    "                print(\"serial_number: \" + serial_number)\n",
    "                # print(server_socket.shared_ciphers())\n",
    "            server_socket.close()\n",
    "\n",
    "\n",
    "if __name__ == '__main__':\n",
    "    # DO NOT USE IP\n",
    "\n",
    "    host_name = input(\"host name ? (example github.com) \\n\")\n",
    "\n",
    "    prt = input(\"port ? \\n\")\n",
    "    tcp_it = \"https\"\n",
    "    serverHealthCheck = ServerHealthCheck(host_name, prt, tcp_it)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.8"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}