Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
connectivity-test
Advanced tools
Assesses the connectivity between a host, Internet, and AWS services.
Assesses the connectivity between a host, Internet, and AWS services.
Current version: 1.0.0
Lead Maintainer: Halim Qarroum
npm install --global connectivity-test
The contest
(or connectivity-tester) command-line tool is a Node.js application that is useful if you are connected to an unfamiliar network you do not control, and want to assess the connectivity options you have to the Internet and AWS services as well.
It also implements a captive portal detection which are common on public networks.
Once the connectivity-test
package has been installed, you can run it using the following command in your terminal :
contest
This will start the test plan associated with the different network connectivity tests which contest
has been developed to assess.
Note that the MQTT test will fail since you did not yet configured
contest
to take AWS IoT certificates into consideration (see next section).
In order to allow contest
to test an MQTT connection to the AWS IoT Core message broker, you need to generate a valid device certificate chain using the AWS Console. As such, you need to have the following files at your disposal for the MQTT test to succeed :
.cert.pem
extension)..key
extension)..pem
file.Make sure that you associate to your certificate(s) the rights to
iot:Connect
to the MQTT broker,iot:Receive
andiot:Publish
on theconnectivity/tester
topic.
Once you have downloaded these files on your filesystem, you need to ensure that you know the AWS IoT endpoint associated with your account and desired region.
To do so, you can run the following command which will invoke the aws-cli :
aws iot describe-endpoint
To retrieve your AWS IoT endpoint, you can also open the AWS IoT console in your browser, and click on the Settings option on the bottom left-hand corner of the side-menu.
At this point, you have all the elements to provide contest
with all the information required to establish a connection to AWS IoT. To pass all these information to the command-line tool, you can use the following example :
contest --aws:iot:keyPath=path/to/private.key --aws:iot:certPath=path/to/certificate.pem --aws:iot:caPath=path/to/root-ca.pem --aws:iot:host=aws-iot-endpoint
AWS has recently announced support for the ALPN TLS extension on its IoT service which allows MQTT clients to connect to the AWS IoT Core message broker on the 443 instead of the standard 8883 port.
The contest
command-line tool activates automatically these ALPN extensions if you specify the port 443 in the command line options :
contest --aws:iot:port=443
When contest
assess the connectivity against AWS services, it will use by default the eu-central-1
region. If you wish to change the region, you can pass the following option on the command-line tool :
contest --aws:global:region=us-east-1
Note that all AWS services are not available in every regions tested by
contest
, in this case a meaningful error will be raised on that particular service during the tests if it is not implemented in the region you have selected.
FAQs
📻 Assesses the connectivity between a host, Internet, and AWS services.
The npm package connectivity-test receives a total of 0 weekly downloads. As such, connectivity-test popularity was classified as not popular.
We found that connectivity-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.