projects
/
tls-check.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (from parent 1:
0790987
)
it seems EXP and LOW ciphersuits are gone
author
Ralf Jung
<post@ralfj.de>
Tue, 13 Sep 2016 08:28:32 +0000
(10:28 +0200)
committer
Ralf Jung
<post@ralfj.de>
Tue, 13 Sep 2016 08:28:32 +0000
(10:28 +0200)
tls-check
patch
|
blob
|
history
diff --git
a/tls-check
b/tls-check
index 04c911f7d71055f91610abaffd3b2793b39ecb0b..bb2fc63fb49df50c80ab38be9a73cf708295c421 100755
(executable)
--- a/
tls-check
+++ b/
tls-check
@@
-112,8
+112,6
@@
CipherProps = namedtuple('CipherProps', 'bits, strength, isPfs')
class CipherPropsProvider:
def __init__(self):
class CipherPropsProvider:
def __init__(self):
- self.exp = set(list_ciphers("EXP"))
- self.low = set(list_ciphers("LOW"))
self.medium = set(list_ciphers("MEDIUM"))
self.high = set(list_ciphers("HIGH"))
self.props = {}
self.medium = set(list_ciphers("MEDIUM"))
self.high = set(list_ciphers("HIGH"))
self.props = {}
@@
-143,16
+141,10
@@
class CipherPropsProvider:
kx = kxMatch.group(1)
isPfs = kx in ('DH', 'DH(512)', 'ECDH')
# determine security level
kx = kxMatch.group(1)
isPfs = kx in ('DH', 'DH(512)', 'ECDH')
# determine security level
- isExp = cipher in self.exp
- isLow = cipher in self.low
isMedium = cipher in self.medium
isHigh = cipher in self.high
isMedium = cipher in self.medium
isHigh = cipher in self.high
- assert isExp+isLow+isMedium+isHigh <= 1, "Cipher "+cipher+" is more than one from EXP, LOW, MEDIUM, HIGH"
- if isExp:
- strength = CipherStrength.exp
- elif isLow:
- strength = CipherStrength.low
- elif isMedium:
+ assert isMedium+isHigh <= 1, "Cipher "+cipher+" is more than one from EXP, LOW, MEDIUM, HIGH"
+ if isMedium:
strength = CipherStrength.medium
elif isHigh:
strength = CipherStrength.high
strength = CipherStrength.medium
elif isHigh:
strength = CipherStrength.high