add info and code to get certs in browser

Signed-off-by: Niv Sardi <xaiki@evilgiggle.com>

README.org

@@ -13,3 +13,8 @@ http://www.bcra.gov.ar/SistemasFinancierosYdePagos/Proveedores-servicios-de-pago
 http://www.bcra.gov.ar/SistemasFinancierosYdePagos/Proveedores-servicios-de-billeteras-digitales-Interoperables.asp
 
 http://www.bcra.gob.ar/SistemasFinancierosYdePagos/Entidades_financieras.asp
+
+* certs in browsers
+https://stackoverflow.com/questions/6566545/is-there-any-way-to-access-certificate-information-from-a-chrome-extension
+https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest#accessing_security_information
+https://chromium-review.googlesource.com/c/chromium/src/+/644858

detect.js

@@ -1,5 +1,29 @@
 let run = () => {
+    console.log(`\n\nTLS browser extension loaded`)
 
+    // https://developer.chrome.com/extensions/match_patterns
+    var ALL_SITES = { urls: ['<all_urls>'] }
+
+    // Mozilla doesn't use tlsInfo in extraInfoSpec
+    var extraInfoSpec = ['blocking'];
+
+    // https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/webRequest/onHeadersReceived
+    browser.webRequest.onHeadersReceived.addListener(async function(details) {
+        console.log(`\n\nGot a request for ${details.url} with ID ${details.requestId}`)
+
+        // Yeah this is a String, even though the content is a Number
+        var requestId = details.requestId
+
+        var securityInfo = await browser.webRequest.getSecurityInfo(requestId, {
+            certificateChain: true,
+            rawDER: false
+        });
+
+        console.log(`securityInfo: ${JSON.stringify(securityInfo, null, 2)}`)
+
+    }, ALL_SITES, extraInfoSpec)
+
+    console.log('Added listener')
 
 }
 

manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 2,
   "name": "Spoof detect",
-  "version": "0.1",
+  "version": "0.0.1-alpha0",
   "icons": {
     "48": "icons/48.png"
   },
@@ -11,5 +11,13 @@
       "matches": ["<all_urls>"],
       "js": ["detect.js"]
     }
+  ],
+  "background": {
+    "scripts": ["detect.js"]
+  },
+  "permissions": [
+    "webRequest",
+    "webRequestBlocking",
+    "<all_urls>"
   ]
 }