Pure Ruby TLS engine
選択できるのは25トピックまでです。 トピックは、先頭が英数字で、英数字とダッシュ('-')を使用した35文字以内のものにしてください。
aeris 894c2fef3a Drone SMTP config 8ヶ月前
bin Update CI 1年前
lib/cryptcheck Raise alert when read 1年前
spec Raise alert when read 1年前
.drone.yml Drone SMTP config 8ヶ月前
.gitignore Init project 1年前
.rspec Init project 1年前
.travis.yml Update CI 1年前
CODE_OF_CONDUCT.md Init project 1年前
Gemfile Init project 1年前
Gemfile.lock Init project 1年前
README.md Init project 1年前
Rakefile Init project 1年前
cryptcheck-engine.gemspec Init project 1年前

README.md

Cryptcheck::Engine

CryptCheck needs support of old, unsecured and so deprecated protocols (SSLv2, SSLv3…) or cipher suite (RC4, 3DES…) to be able to fully cover SSL/TLS verifications.

OpenSSL 1.0 is necessary to support such deprecated things, but new TLS features like TLSv1.3 requires 1.2. And currently, Ruby is tied to a single OpenSSL binding, only old Ruby version (2.3) supports OpenSSL 1.0 and at the opposite, only 2.5+ supports 1.2.

It will be a real mess to use multiple binding to fully check a server

  • multiple OpenSSL bindings
  • multiple Ruby versions
  • RPC or equivalent
  • not totally ordered set for server preferences

This project is a SSL/TLS pure Ruby implementation to remove CryptCheck OpenSSL dependency and so to support together old and new SSL/TLS features.

**/!\ DON'T USE IT IN PRODUCTION /!**
This is not a cryptographic safe implementation!

Installation

Add this line to your application's Gemfile:

gem 'cryptcheck-engine'

And then execute:

$ bundle

Or install it yourself as:

$ gem install cryptcheck-engine

Usage

TODO: Write usage instructions here

Development

After checking out the repo, run bin/setup to install dependencies. Then, run rake spec to run the tests. You can also run bin/console for an interactive prompt that will allow you to experiment.

To install this gem onto your local machine, run bundle exec rake install. To release a new version, update the version number in version.rb, and then run bundle exec rake release, which will create a git tag for the version, push git commits and tags, and push the .gem file to rubygems.org.

Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/aeris/cryptcheck-tls. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the Contributor Covenant code of conduct.

Code of Conduct

Everyone interacting in the Cryptcheck::Engine project’s codebases, issue trackers, chat rooms and mailing lists is expected to follow the code of conduct.