Commit Graph

66 Commits (46c36ccef2319f518464c88b041e06832d6a33f7)

Author SHA1 Message Date
aeris 46c36ccef2 Update patches 2019-10-14 00:23:28 +02:00
aeris b89c8972ba Bad exception handling 2019-10-14 00:23:28 +02:00
aeris 7cd8cefd01 Fix test for ECDH curves 2019-10-14 00:23:28 +02:00
aeris 28e1c8c2e3 Separate ECC from RSA for key status 2019-10-14 00:23:28 +02:00
aeris 9fd0fb1974 New servers for regular analysis 2019-10-13 23:45:53 +02:00
aeris 61f16c618e Fix error when multiple server results 2019-10-13 23:45:53 +02:00
aeris f398cc1ef1 3DES is error (sweet32) 2019-10-13 23:45:53 +02:00
aeris d7a732183d Upgrade rake 2019-10-13 23:45:53 +02:00
Aeris e46a1c14c5 Override TLS version **and** ciphers for HTTParty
`set_params` override everything with default parameters if not provided
So if ciphers not specified, reset to the default hardcoded ones
See https://github.com/ruby/ruby/blob/v2_3_0/ext/openssl/lib/openssl/ssl.rb#L124
2016-05-11 18:20:41 +02:00
Aeris c34802c7ec Better error handling 2016-05-10 17:23:15 +02:00
Aeris 6f0a193651 More hosts 2016-05-10 17:22:58 +02:00
Aeris 41cdbaa83f More unit tests (SMTP) 2016-05-06 21:54:30 +02:00
Aeris f1c14eef39 More unit tests (XMPP) 2016-05-06 21:27:02 +02:00
Aeris 5aa9a975fe More unit tests (HTTPS) 2016-05-06 19:59:18 +02:00
Aeris a2c38b05b0 Unit tests 2016-05-03 19:57:34 +02:00
Aeris eb82f8e1ae Check for MX and not directly the IP for SMTP 2016-05-03 19:53:07 +02:00
Aeris 1a7b7206e0 Rename dh key access patch 2016-04-26 19:21:32 +02:00
Aeris 90a5469eb1 Enable EXPORT ciphers 2016-04-26 19:21:15 +02:00
Aeris f3d70d1daf Add details for ciphers 2016-04-26 19:20:30 +02:00
Aeris 2c7ed5307e Support CHACHA20+POLY1305 thanks to CloudFlare patch 2016-04-04 21:15:17 +02:00
Aeris fe1c736914 Refactor Makefile 2016-04-04 21:14:15 +02:00
Aeris 81152aeb4e Official patch for tmp_key 2016-04-04 21:14:02 +02:00
Aeris 97ac325af0 Fix cipher color 2016-03-19 23:33:11 +01:00
Aeris 8b6f08ab4d Activate sslv2 and sslv3 on openssl 1.0.2g 2016-03-19 22:25:05 +01:00
Aeris c1499fc6e6 Move up host resolving for speed ehanchement 2016-02-22 00:16:42 +01:00
Aeris f5bedc0e8f Fetch ciphers from cipher suite 2016-01-09 16:19:13 +01:00
Aeris 2967cd9d39 ANSSI recommendation : 3072 bits min
RGS 2.0 B1, §2.2.1.1 (p17)
2015-11-24 00:26:58 +01:00
Aeris 1e135aa635 Upgrade to ruby 2.3 (2.3.0-preview1) 2015-11-24 00:24:34 +01:00
Aeris 23227d1e36 gouv.fr sites (thanks Vincib !) 2015-11-21 21:26:34 +01:00
Aeris f9a93cd83b Cipher size is the weakest supported, not the strongest (+optimization) 2015-11-21 21:25:26 +01:00
Aeris 4237a25ab9 ECDH is not a PFS cipher, only ECDHE is 2015-11-21 21:23:36 +01:00
Aeris 9e2625d4aa Generic TLS checker 2015-09-10 00:29:03 +02:00
Aeris 78aba5a9f8 Change SSH preferences
See ANSSI report http://www.ssi.gouv.fr/uploads/2014/01/NT_OpenSSH.pdf
2015-09-09 22:08:56 +02:00
Aeris 0ecc15cc79 Remove SHA-1 warning, not a problem for HMAC
See https://www.schneier.com/blog/archives/2005/02/sha1_broken.html
2015-09-09 21:43:25 +02:00
Aeris 60a8a44c1a Fix hang if XMPP server answers with error (unknown vhost) 2015-09-09 21:39:08 +02:00
Aeris 4b680c6eec Don’t fail all check if HSTS fail 2015-09-09 21:37:32 +02:00
Aeris f75af5a736 Order ciphers by strength 2015-09-09 21:36:26 +02:00
Aeris d92bf21832 Fix log level on runner 2015-09-09 21:34:44 +02:00
Aeris 8a8fa811a9 Fix build error on .so.1.0.0 lib 2015-09-09 21:34:04 +02:00
Aeris 98df3b2a95 Homogenize colors 2015-09-01 22:41:06 +02:00
Aeris 2b19052c0c Don’t use net-ssh to (not) ensure server compatibility 2015-09-01 00:57:48 +02:00
Aeris cf9a606a72 Remove old test resources 2015-09-01 00:53:47 +02:00
Aeris 6de0fd5516 SSH support 2015-08-27 23:38:37 +02:00
Aeris 7298746ccb Miss SSLv2/3 and DSS errors 2015-08-26 18:44:15 +02:00
Aeris 9b74c5a829 Cipher status 2015-08-26 14:29:47 +02:00
Aeris 51216b0f0f Readme 2015-08-24 20:06:07 +02:00
Aeris 92424828e1 Fix debug output 2015-08-23 14:36:46 +02:00
Nicolas Vinot 67b2654e22 Refactoring for usage on RoR application 2015-08-22 23:50:59 +02:00
Nicolas Vinot 7753d023a2 Display DH parameter size 2015-08-19 18:04:13 +02:00
Nicolas Vinot 1994fdc87f Refactor exception handling 2015-08-16 13:30:04 +02:00