LittleNellie
/
cipherscan
mirror of https://github.com/mozilla/cipherscan.git
2
0
Fork 0
Code Issues Releases Wiki Activity

verify server side ordering is used in analyze.py

This commit is contained in:
Julien Vehent 2014-10-11 00:34:07 -04:00
parent 1c9d52c94c
commit 0da92f25b7
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
analyze.py
View File

@ -114,6 +114,8 @@ def is_old(results):
old = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return old
# is_intermediate is similar to is_old but for intermediate configuration from
@ -174,6 +176,8 @@ def is_intermediate(results):
inter = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return inter
# is_modern is similar to is_old but for modern configuration from
@ -221,6 +225,8 @@ def is_modern(results):
modern = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return modern
def is_ordered(results, ref_ciphersuite, lvl):