mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-09-19 20:02:18 +02:00
45bb7d0c28
Since it is impossible to make openssl command line tool send TLSv1.3 Client Hello message, add a python based tool to perform TLS version intolerance scan
51 lines
2.0 KiB
Python
51 lines
2.0 KiB
Python
# Copyright (c) 2015 Hubert Kario
|
|
# Released under Mozilla Public License Version 2.0
|
|
|
|
try:
|
|
import unittest2 as unittest
|
|
except ImportError:
|
|
import unittest
|
|
|
|
from tlslite.messages import ClientHello
|
|
from tlslite.extensions import SNIExtension, SupportedGroupsExtension, \
|
|
ECPointFormatsExtension, NPNExtension, SignatureAlgorithmsExtension
|
|
from tlslite.utils.codec import Parser
|
|
from cscan.config import Firefox_42
|
|
from cscan.extensions import RenegotiationExtension
|
|
from cscan.constants import ExtensionType
|
|
|
|
class TestFirefox(unittest.TestCase):
|
|
def test_firefox_42(self):
|
|
gen = Firefox_42()
|
|
ch = gen(bytearray(b'example.com'))
|
|
|
|
self.assertIsNotNone(ch)
|
|
self.assertIsInstance(ch, ClientHello)
|
|
self.assertEqual(len(ch.write()), 176)
|
|
self.assertEqual(ch.client_version, (3, 3))
|
|
self.assertEqual(gen.record_version, (3, 1))
|
|
self.assertEqual(len(ch.cipher_suites), 11)
|
|
self.assertIsInstance(ch.extensions[0], SNIExtension)
|
|
self.assertEqual(ch.extensions[1].extType,
|
|
ExtensionType.renegotiation_info)
|
|
self.assertIsInstance(ch.extensions[2],
|
|
SupportedGroupsExtension)
|
|
self.assertIsInstance(ch.extensions[3],
|
|
ECPointFormatsExtension)
|
|
self.assertEqual(ch.extensions[4].extType,
|
|
ExtensionType.session_ticket)
|
|
# bug in tlslite-ng, removes NPN extensions from provided extensions
|
|
#self.assertIsInstance(ch.extensions[5],
|
|
# NPNExtension)
|
|
self.assertEqual(ch.extensions[5].extType,
|
|
ExtensionType.alpn)
|
|
self.assertEqual(ch.extensions[6].extType,
|
|
ExtensionType.status_request)
|
|
self.assertIsInstance(ch.extensions[7],
|
|
SignatureAlgorithmsExtension)
|
|
self.assertEqual(ch.compression_methods, [0])
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|