mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-12-04 03:03:41 +01:00
add support for GOST cipher scanning
This commit is contained in:
parent
3bc8dc5583
commit
596692a18e
@ -42,6 +42,11 @@ if [[ "$TIMEOUTOUTPUT" =~ BusyBox ]]; then
|
|||||||
TIMEOUTBIN="$TIMEOUTBIN -t"
|
TIMEOUTBIN="$TIMEOUTBIN -t"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# use custom config file to enable GOST ciphers
|
||||||
|
if [[ -e $(dirname $0)/openssl.cnf ]]; then
|
||||||
|
export OPENSSL_CONF="$(dirname $0)/openssl.cnf"
|
||||||
|
fi
|
||||||
|
|
||||||
# find a list of trusted CAs on the local system, or use the provided list
|
# find a list of trusted CAs on the local system, or use the provided list
|
||||||
if [ -z "$CACERTS" ]; then
|
if [ -z "$CACERTS" ]; then
|
||||||
for f in /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt; do
|
for f in /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt; do
|
||||||
|
12
openssl.cnf
Normal file
12
openssl.cnf
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
openssl_conf = openssl_def
|
||||||
|
|
||||||
|
[openssl_def]
|
||||||
|
engines = engine_section
|
||||||
|
|
||||||
|
[engine_section]
|
||||||
|
gost = gost_section
|
||||||
|
|
||||||
|
[gost_section]
|
||||||
|
engine_id = gost
|
||||||
|
default_algorithms = ALL
|
||||||
|
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet
|
Loading…
Reference in New Issue
Block a user