2
0
mirror of https://github.com/mozilla/cipherscan.git synced 2024-11-22 14:23:41 +01:00
Commit Graph

417 Commits

Author SHA1 Message Date
Julien Vehent
885b345930
Merge pull request #184 from spanglerco/analyze-inter
analyze.py: Fix intermediate configuration detection
2020-03-12 07:51:20 -04:00
Paul Spangler
0c6f41ddc6
analyze.py: Fix intermediate configuration detection
Use the openssl_ciphers key instead of openssl_ciphersuites
since we compare against ciphers being used. Remove hardcoded
assumptions about TLS 1.1 and AES being required. Use the
server_preferred_order key instead of assuming server order
for ciphers.
2019-10-29 10:17:58 -05:00
Hubert Kario
ff8eac48c3
Merge pull request #181 from dchandekstark/issue-180
Fixes #180
2019-07-26 18:27:32 +02:00
David Chandek-Stark
ea341f0aec Fixes #180 2019-07-08 15:32:35 -04:00
Julien Vehent [:ulfr]
edfec2c1c6
Merge pull request #170 from tomato42/tweak-phrasing
de-engrishify error message
2018-12-12 10:23:04 -05:00
Hubert Kario
3186212159 de-engrishify error message 2018-12-12 16:08:54 +01:00
Julien Vehent [:ulfr]
dced87353e
Merge pull request #161 from tomato42/phrasing-in-analyze.py
tweak phrasing for analyze.py report
2018-12-12 07:26:27 -05:00
Julien Vehent [:ulfr]
3f8a71b128
Merge pull request #160 from tomato42/badge
add travis badge
2018-12-12 07:25:27 -05:00
Julien Vehent [:ulfr]
c34dc7e17a
Merge pull request #166 from pancho-villa/master
Changes analyze.py to be compatible with python3
2018-12-12 07:25:12 -05:00
Adam Garcia
acfae638a3 Changes analyze.py to be compatible with python3 2018-08-28 14:18:52 -07:00
Hubert Kario
981ac390d6 tweak phrasing for analyze.py report
for intermediate and modern, we expect the server to support exact
set of curves, reflect that in the error message
2018-05-20 14:31:09 +02:00
Hubert Kario
32fb9a63c3 add travis badge
we have a CI* so let's advertise it!

 * - terms and conditions may apply ;)
2018-05-20 14:24:18 +02:00
Julien Vehent [:ulfr]
b0548dff8e
Merge pull request #149 from tomato42/bash-env-fix
make shell scripts respect PATH
2018-05-19 19:56:27 -04:00
Julien Vehent [:ulfr]
a614389861
Merge pull request #156 from tomato42/spaces-in-path
support spaces in openssl path
2018-05-19 19:55:57 -04:00
Julien Vehent [:ulfr]
1df1377f6c
Merge pull request #157 from mozilla/jvehent-patch-1
Create .travis.yml
2018-05-19 19:55:31 -04:00
Julien Vehent [:ulfr]
9681b2f615
Create .travis.yml 2018-05-19 19:54:18 -04:00
Hubert Kario
4890e26910 support spaces in openssl path
fixes #78
2018-05-19 20:25:43 +02:00
Hubert Kario
31761fa7b2 make shell scripts respect PATH
use the bash from PATH, not from /bin

fixes #141
2018-05-13 19:33:05 +02:00
Hubert Kario
528e94d613
Merge pull request #143 from luigiJsonar/patch-1
README.md typo
2017-11-21 01:33:44 +01:00
Luigi Labigalini
fda447a5a8
README.md typo 2017-11-16 12:02:33 -08:00
Hubert Kario
cb6e027327
Merge pull request #142 from ebabani/master
Redirect dependency download output to stderr
2017-11-13 12:12:29 +01:00
Ergin Babani
3ecd5c5895 Redirect dependency download output to stderr
If running `analyze.py` for the first time the dependency downloading
output would be part of the json, and the command would fail due to
invalid json data.
2017-11-07 13:18:10 -05:00
Hubert Kario
17dcd0dc05 Merge pull request #138 from sunshuzhou/patch-1
Update cipherscan
2017-05-03 14:57:32 +02:00
Sun Shuzhou
2204ec21e9 Update cipherscan 2017-05-03 09:03:32 +08:00
Sun Shuzhou
c23d1ba64a Update cipherscan 2017-05-02 21:38:03 +08:00
Hubert Kario
e9f3df4e9f Merge pull request #135 from Jiab77/patch-1
Fixed symbolic link creation error and git output supression
2017-01-23 16:16:27 +01:00
Jonathan Barda
0b1d5331d6 Added requested changes
I may change `${BASH_SOURCE[0]}` by ` `basename $BASH_SOURCE` ` if you prefer
2017-01-23 16:12:34 +01:00
Jonathan Barda
717b9c0a13 Adapted changes as requested
Added some detail when required libraries are not present on the host and needs downloading
2017-01-23 15:27:04 +01:00
Jonathan Barda
5fd2e95c4d Few fixes
Added `&>/dev/null` on git commands to suppress their output
Fixed the symbolic link creation that pointed to non existent path. `ecdsa` folder moved to `src/ecdsa`
2017-01-23 07:36:24 +01:00
Julien Vehent [:ulfr]
757bfefc6d Merge pull request #134 from tycho/fix-benchmark-output
fix -b (benchmark) output
2017-01-13 16:19:56 -05:00
Julien Vehent [:ulfr]
1f2846d54e Merge pull request #131 from castillar/master
Added info about OpenSSL proxy option to cipherscan script.
2017-01-13 16:15:15 -05:00
Julien Vehent [:ulfr]
6d66214fd1 Merge pull request #124 from firesock/master
Allow EC keys to have a smaller bitsize
2017-01-13 16:14:33 -05:00
Julien Vehent [:ulfr]
b1d37bf26d Merge pull request #128 from tomato42/intolerance-tests
TLS version (in)tolerance scanner
2017-01-13 16:07:44 -05:00
Steven Noonan
981cf0744e cipherscan: fix benchmark mode output
The microsecond measurement column wasn't being rendered.

Signed-off-by: Steven Noonan <steven@uplinklabs.net>
2017-01-01 14:15:23 -08:00
Steven Noonan
532ff712aa cipherscan: always define a curves_ordering column value
Signed-off-by: Steven Noonan <steven@uplinklabs.net>
2017-01-01 14:15:23 -08:00
Jos Purvis
c6934569bd Update to fix OpenSSL version in info message 2016-12-02 21:07:24 -05:00
Jos Purvis
3fc28b001c Added info about OpenSSL proxy option to cipherscan script. 2016-12-02 12:29:44 -05:00
Hubert Kario
fb8b4d73bf interpreting the intolerance data 2016-10-11 22:46:02 +02:00
Hubert Kario
45bb7d0c28 TLS version (in)tolerance scanner
Since it is impossible to make openssl command line tool send
TLSv1.3 Client Hello message, add a python based tool to perform
TLS version intolerance scan
2016-10-05 01:00:11 +02:00
Julien Vehent [:ulfr]
e5b747d29b Merge pull request #125 from tomato42/sort-cas-by-usage
sort CA's by count, not name
2016-09-30 15:30:48 -04:00
Julien Vehent [:ulfr]
197881da81 Merge pull request #126 from tomato42/npn
Add support for collecting supported NPN protocols
2016-09-17 08:11:03 -04:00
Hubert Kario
6a906a6267 add support for collecting supported NPN protocols 2016-09-16 23:06:34 +02:00
Hubert Kario
0120fff9bc sort CA's by count, not name 2016-09-06 14:08:06 +02:00
Awad Mackie
bb3e89ec09 Update fubar EC parameter size to 256 2016-08-25 00:40:39 +01:00
Awad Mackie
3a2a43f91d Hardcode minimum EC key size 2016-08-22 23:44:13 +01:00
Awad Mackie
955d55a6ba Update EC check to use regexp and match all OpenSSL EC cipher suite variants 2016-08-22 23:33:28 +01:00
Awad Mackie
f5ad5806c3 Allow EC keys to have a smaller bitsize 2016-08-21 13:16:54 +01:00
Julien Vehent
74dd82e8ad Update OpenSSL binary 2016-08-16 11:28:34 -04:00
Julien Vehent [:ulfr]
8b73962b72 Merge pull request #122 from tomato42/result-parser-update
Result parser update
2016-07-23 10:30:52 -04:00
Julien Vehent [:ulfr]
4a6cb350c8 Merge pull request #123 from tomato42/certificate-verification-time
changing time of verification for certificate chains
2016-07-23 10:29:11 -04:00