mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-11-05 07:23:42 +01:00
better detection for EXP and low grade ciphers in stats
EXP is self explanatory - export grade DES-CBC3-MD5 is available only in SSLv2 - not secure RC4-64-MD5 is also a weakened version (though not marked as export grade)
This commit is contained in:
parent
3bc8dc5583
commit
341f657e83
@ -187,7 +187,10 @@ for r,d,flist in os.walk(path):
|
||||
temp_client_incompat[client_name][entry['cipher']] = 1
|
||||
|
||||
""" store the ciphers supported """
|
||||
if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher']:
|
||||
if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher'] or \
|
||||
'EXP' in entry['cipher'] or \
|
||||
'DES-CBC3-MD5' in entry['cipher'] or \
|
||||
'RC4-64-MD5' in entry['cipher']:
|
||||
ciphertypes += 1
|
||||
name = "z:" + entry['cipher']
|
||||
tempcipherstats[name] = 1
|
||||
|
Loading…
Reference in New Issue
Block a user