WithSecureOpenSource / mittn

Mittn: Security test tool runner for test automation in CI
Apache License 2.0
194 stars 35 forks source link

tlschecker: Add remaining check for Logjam #24

Closed mathias-nyman closed 8 years ago

mathias-nyman commented 9 years ago

Specifically this adds a check for a strong Diffie Hellman Group.

Mitigating Logjam involves all these three, but 1) and 2) are caught by other existing checks: 1) Disable Export Cipher Suites 2) Deploy (Ephemeral) Elliptic-Curve Diffie-Hellman (ECDHE) 3) Use a Strong, Diffie Hellman Group (source: https://weakdh.org/sysadmin.html)