mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-11-22 14:23:41 +01:00
better detection for EXP and low grade ciphers in stats
EXP is self explanatory - export grade DES-CBC3-MD5 is available only in SSLv2 - not secure RC4-64-MD5 is also a weakened version (though not marked as export grade)
This commit is contained in:
parent
3bc8dc5583
commit
341f657e83
@ -187,7 +187,10 @@ for r,d,flist in os.walk(path):
|
|||||||
temp_client_incompat[client_name][entry['cipher']] = 1
|
temp_client_incompat[client_name][entry['cipher']] = 1
|
||||||
|
|
||||||
""" store the ciphers supported """
|
""" store the ciphers supported """
|
||||||
if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher']:
|
if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher'] or \
|
||||||
|
'EXP' in entry['cipher'] or \
|
||||||
|
'DES-CBC3-MD5' in entry['cipher'] or \
|
||||||
|
'RC4-64-MD5' in entry['cipher']:
|
||||||
ciphertypes += 1
|
ciphertypes += 1
|
||||||
name = "z:" + entry['cipher']
|
name = "z:" + entry['cipher']
|
||||||
tempcipherstats[name] = 1
|
tempcipherstats[name] = 1
|
||||||
|
Loading…
Reference in New Issue
Block a user