 aeris
|
5dbf67e0d0
|
Better and more concise logging
|
6 years ago |
|
aeris
|
e39b7670f1
|
Fix AEAD and weak key checks
|
6 years ago |
|
aeris
|
ad7d8287a8
|
Better display for supported ciphers
|
6 years ago |
|
aeris
|
dbc58944ac
|
Check for PSK and SRP ciphers
|
6 years ago |
|
aeris
|
299725996b
|
Display curve for ECC key
|
6 years ago |
|
aeris
|
0f45195170
|
Remove trailing score
|
6 years ago |
|
aeris
|
7ec4b5a45f
|
Update patches
|
6 years ago |
|
aeris
|
a212aa0711
|
Bad exception handling
|
6 years ago |
|
aeris
|
f209e17f5d
|
Check for must_staple cert extension
|
6 years ago |
|
aeris
|
8a1c4f8856
|
Check for TLS_FALLBACK_SCSV
|
6 years ago |
|
aeris
|
e604c11e13
|
Refactor test checks
|
6 years ago |
|
aeris
|
b5e828a139
|
Fix test for ECDH curves
|
6 years ago |
|
aeris
|
2d014181b4
|
Remove score
|
6 years ago |
|
aeris
|
5c3a32396d
|
Separate ECC from RSA for key status
|
6 years ago |
|
aeris
|
04ae17945d
|
Test for ECC curves support
|
6 years ago |
|
aeris
|
2c3fdf033b
|
New servers for regular analysis
|
6 years ago |
|
aeris
|
4d3e52a188
|
Fix error when multiple server results
|
6 years ago |
|
aeris
|
d043c3db4e
|
3DES is error (sweet32)
|
6 years ago |
|
aeris
|
adda7570ad
|
Upgrade rake
|
6 years ago |
|
aeris
|
586d6585fc
|
Upgrade OpenSSL & Ruby
|
6 years ago |
|
Aeris
|
e46a1c14c5
|
Override TLS version **and** ciphers for HTTParty
`set_params` override everything with default parameters if not provided
So if ciphers not specified, reset to the default hardcoded ones
See https://github.com/ruby/ruby/blob/v2_3_0/ext/openssl/lib/openssl/ssl.rb#L124
|
7 years ago |
|
Aeris
|
c34802c7ec
|
Better error handling
|
7 years ago |
|
Aeris
|
6f0a193651
|
More hosts
|
7 years ago |
|
Aeris
|
41cdbaa83f
|
More unit tests (SMTP)
|
7 years ago |
|
Aeris
|
f1c14eef39
|
More unit tests (XMPP)
|
7 years ago |
|
Aeris
|
5aa9a975fe
|
More unit tests (HTTPS)
|
7 years ago |
|
Aeris
|
a2c38b05b0
|
Unit tests
|
7 years ago |
|
Aeris
|
eb82f8e1ae
|
Check for MX and not directly the IP for SMTP
|
7 years ago |
|
Aeris
|
1a7b7206e0
|
Rename dh key access patch
|
7 years ago |
|
Aeris
|
90a5469eb1
|
Enable EXPORT ciphers
|
7 years ago |
|
Aeris
|
f3d70d1daf
|
Add details for ciphers
|
7 years ago |
|
Aeris
|
2c7ed5307e
|
Support CHACHA20+POLY1305 thanks to CloudFlare patch
|
7 years ago |
|
Aeris
|
fe1c736914
|
Refactor Makefile
|
7 years ago |
|
Aeris
|
81152aeb4e
|
Official patch for tmp_key
|
7 years ago |
|
Aeris
|
97ac325af0
|
Fix cipher color
|
7 years ago |
|
Aeris
|
8b6f08ab4d
|
Activate sslv2 and sslv3 on openssl 1.0.2g
|
7 years ago |
|
Aeris
|
c1499fc6e6
|
Move up host resolving for speed ehanchement
|
7 years ago |
|
Aeris
|
f5bedc0e8f
|
Fetch ciphers from cipher suite
|
7 years ago |
|
Aeris
|
2967cd9d39
|
ANSSI recommendation : 3072 bits min
RGS 2.0 B1, §2.2.1.1 (p17)
|
7 years ago |
|
Aeris
|
1e135aa635
|
Upgrade to ruby 2.3 (2.3.0-preview1)
|
7 years ago |
|
Aeris
|
23227d1e36
|
gouv.fr sites (thanks Vincib !)
|
7 years ago |
|
Aeris
|
f9a93cd83b
|
Cipher size is the weakest supported, not the strongest (+optimization)
|
7 years ago |
|
Aeris
|
4237a25ab9
|
ECDH is not a PFS cipher, only ECDHE is
|
7 years ago |
|
Aeris
|
9e2625d4aa
|
Generic TLS checker
|
8 years ago |
|
Aeris
|
78aba5a9f8
|
Change SSH preferences
See ANSSI report http://www.ssi.gouv.fr/uploads/2014/01/NT_OpenSSH.pdf
|
8 years ago |
|
Aeris
|
0ecc15cc79
|
Remove SHA-1 warning, not a problem for HMAC
See https://www.schneier.com/blog/archives/2005/02/sha1_broken.html
|
8 years ago |
|
Aeris
|
60a8a44c1a
|
Fix hang if XMPP server answers with error (unknown vhost)
|
8 years ago |
|
Aeris
|
4b680c6eec
|
Don’t fail all check if HSTS fail
|
8 years ago |
|
Aeris
|
f75af5a736
|
Order ciphers by strength
|
8 years ago |
|
Aeris
|
d92bf21832
|
Fix log level on runner
|
8 years ago |
