tlschecker still uses sslyze 0.7 for Strict TLS header checking

WithSecureOpenSource / mittn

Mittn: Security test tool runner for test automation in CI

Apache License 2.0

194 stars 35 forks source link

tlschecker still uses sslyze 0.7 for Strict TLS header checking #8

Closed anttivs closed 9 years ago

anttivs commented 10 years ago

Needs to be updated to do that for 0.8/0.9 output. Currently users just need to disable that check.

anttivs commented 10 years ago

Apparently it does work for 0.8, but only if the HTTP connection succeeds. If the HTTP connection fails, sslyze's XML output lacks an element, which throws Mittn's XML parsing off. Have to check whether sslyze 0.9 has a fix, and if not, need to patch around it.