mirror of
https://github.com/nsacyber/HIRS.git
synced 2024-12-18 20:47:58 +00:00
118 lines
3.2 KiB
Bash
118 lines
3.2 KiB
Bash
#!/bin/bash
|
|
|
|
#User input parameters:
|
|
#$1 filter start date 'yyyy-mm-dd'
|
|
#$2 filter end date 'yyyy-mm-dd'
|
|
#$3 ACA address, default is localhost if not given
|
|
|
|
#check for getopt(1) on local system
|
|
getopt --test > /dev/null
|
|
if [[ ${PIPESTATUS[0]} -ne 4 ]]
|
|
then
|
|
echo "getopt is required to use this script, please ensure installation!"
|
|
else
|
|
echo "getopt detected"
|
|
fi
|
|
|
|
#set parameter names and call getopts on inputsi, then parse/assign arguments
|
|
SHORTOPTS=d:e:i:ypm:s:jh
|
|
LONGOPTS=start-date:,end-date:,ip:,system-only,component-only,manufacturer:,serial:,json,help
|
|
PARSED=$(getopt --options=$SHORTOPTS --longoptions=$LONGOPTS --name "$0" -- "$@")
|
|
if [[ ${PIPESTATUS[0]} -ne 0 ]]
|
|
then
|
|
exit 2
|
|
fi
|
|
eval set -- "$PARSED"
|
|
startDate=
|
|
endDate=
|
|
ip=localhost
|
|
system=
|
|
component=
|
|
manufacturer=
|
|
serial=
|
|
json=
|
|
|
|
helpText="\n\n\nHELP MENU\n\nThe following options are available:\n-d|--start-date\t\t<yyyy-mm-dd>\tDefault: 1970-01-01\tThe earliest date to return validation reports from.\n"
|
|
helpText+="-e|--end-date\t\t<yyyy-mm-dd>\tDefault: current time\tThe latest date to return validation reports from.\n"
|
|
helpText+="-i|--ip\t\t\t<ACA address>\tDefault: localhost\tThe IP address where the ACA is located.\n"
|
|
helpText+="-y|--system-only\t\t\t\t\t\tReturn only system information from validation reports.\n"
|
|
helpText+="-p|--component-only\t\t\t\t\t\tReturn only component information from validation reports.\n"
|
|
helpText+="-m|--manufacturer\t<manufacturer's name>\t\t\tReturn only the validation report of the device from this manufacturer.\n"
|
|
helpText+="-s|--serial\t\t<serial number>\t\t\t\tReturn only the validation report of the device with this serial number.\n"
|
|
helpText+="-j|--json\t\t\t\t\t\t\tReturn output in JSON format. Only --start-date, --end-date,\n\t\t\t\t\t\t\t\tand --ip parameters are read with this option, all others are ignored.\n"
|
|
|
|
while true
|
|
do
|
|
case "$1" in
|
|
-d|--start-date)
|
|
startDate="$2"
|
|
shift 2
|
|
;;
|
|
-e|--end-date)
|
|
endDate="$2"
|
|
shift 2
|
|
;;
|
|
-i|--ip)
|
|
ip="$2"
|
|
shift 2
|
|
;;
|
|
-y|--system-only)
|
|
system=true
|
|
shift
|
|
;;
|
|
-p|--component-only)
|
|
component=true
|
|
shift
|
|
;;
|
|
-m|--manufacturer)
|
|
manufacturer="$2"
|
|
shift 2
|
|
;;
|
|
-s|--serial)
|
|
serial="$2"
|
|
shift 2
|
|
;;
|
|
-j|--json)
|
|
json=true
|
|
shift
|
|
;;
|
|
-h|--help)
|
|
printf "$helpText"
|
|
exit 0
|
|
;;
|
|
--)
|
|
shift
|
|
break
|
|
;;
|
|
*)
|
|
echo "Programming error"
|
|
exit 3
|
|
;;
|
|
esac
|
|
done
|
|
|
|
#call ACA for validation report
|
|
endpoint="https://$ip:8443/HIRS_AttestationCAPortal/portal/validation-reports"
|
|
echo "$endpoint"
|
|
content=$(curl --insecure $endpoint/list)
|
|
|
|
#Parse JSON response for create times and device names
|
|
rawTimes=$(jq -r '.data | map(.createTime | tostring) | join(",")' <<< "$content")
|
|
createTimes=""
|
|
for i in ${rawTimes//,/ }
|
|
do
|
|
createTimes+="$(date -u +"%Y-%m-%d %H:%M:%S" -d @"$(($i/1000))"),"
|
|
done
|
|
deviceNames=$(jq -r '.data | map(.device.name) | join(",")' <<< "$content")
|
|
|
|
echo "Create times: $createTimes"
|
|
echo "Device names: $deviceNames"
|
|
curlData="dateStart=$startDate&dateEnd=$endDate&createTimes=$createTimes&deviceNames=$deviceNames"
|
|
if [[ "$json" = true ]]
|
|
then
|
|
curlData+="&json=true"
|
|
else
|
|
curlData+="&system=$system&component=$component&manufacturer=$manufacturer&serial=$serial"
|
|
fi
|
|
curl --data "$curlData" --insecure $endpoint/download
|