search

18F / domain-scan

A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
Other
369 stars 139 forks source link

Checking for Symantec certificates #243

Closed jsf9k closed 6 years ago

jsf9k commented 6 years ago

Adding two output fields for the sslyze scanner.

The first field, Is Symantec Cert, is a Boolean field that denotes whether the certificate was issued by Symantec.

If Is Symantec Cert is True, then the second field, Symantec Distrust Date, will contain either the string MARCH_2018 or the string SEPTEMBER_2018 depending on when the Symantec certificate was issued.

You can test this code change for yourself by running the sslyze scanner against dhs.gov and nerdist.com. The first host does not have a Symantec certificate but the second does.