mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 10:23:54 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
17 lines
850 B
Plaintext
17 lines
850 B
Plaintext
table_name("certificates")
|
|
description("Certificate Authorities installed in Keychains/ca-bundles.")
|
|
schema([
|
|
Column("common_name", TEXT, "Certificate CommonName"),
|
|
Column("ca", INTEGER, "1 if CA: true (certificate is an authority) else 0"),
|
|
Column("not_valid_before", DATETIME, "Lower bound of valid date"),
|
|
Column("not_valid_after", DATETIME, "Certificate expiration data"),
|
|
Column("key_algorithm", TEXT, "Key algorithm used"),
|
|
Column("key_usage", TEXT, "Certificate key usage and extended key usage"),
|
|
Column("subject_key_id", TEXT, "SKID an optionally included SHA1"),
|
|
Column("authority_key_id", TEXT, "AKID an optionally included SHA1"),
|
|
Column("sha1", TEXT, "SHA1 hash of the raw certificate contents"),
|
|
Column("path", TEXT, "Path to Keychain or PEM bundle"),
|
|
|
|
])
|
|
implementation("certificates@genCerts")
|