osquery-1/specs/darwin/certificates.table
Teddy Reed b28c4d8d0f Introduce table options (#2101)
Table options includes a change to the Registry::call API for TablePlugins.
When requesting route information or the 'columns' action, a new 'op' key is included.
2016-05-18 12:23:52 -07:00

23 lines
1.2 KiB
Plaintext

table_name("certificates")
description("Certificate Authorities installed in Keychains/ca-bundles.")
schema([
Column("common_name", TEXT, "Certificate CommonName"),
Column("subject", TEXT, "Certificate distinguished name"),
Column("issuer", TEXT, "Certificate issuer distinguished name"),
Column("ca", INTEGER, "1 if CA: true (certificate is an authority) else 0"),
Column("self_signed", INTEGER, "1 if self-signed, else 0"),
Column("not_valid_before", DATETIME, "Lower bound of valid date"),
Column("not_valid_after", DATETIME, "Certificate expiration data"),
Column("signing_algorithm", TEXT, "Signing algorithm used"),
Column("key_algorithm", TEXT, "Key algorithm used"),
Column("key_strength", TEXT, "Key size used for RSA/DSA, or curve name"),
Column("key_usage", TEXT, "Certificate key usage and extended key usage"),
Column("subject_key_id", TEXT, "SKID an optionally included SHA1"),
Column("authority_key_id", TEXT, "AKID an optionally included SHA1"),
Column("sha1", TEXT, "SHA1 hash of the raw certificate contents"),
Column("path", TEXT, "Path to Keychain or PEM bundle"),
])
attributes(cacheable=True)
implementation("certificates@genCerts")