nabla-c0d3 / sslyze

Fast and powerful SSL/TLS scanning library.
GNU Affero General Public License v3.0
3.19k stars 445 forks source link

by default sslyze is now skipping secure header check #645

Open KIT-GregC opened 3 months ago

KIT-GregC commented 3 months ago

Describe the bug The documentation for sslyze describes that "all checks" will be run if you simply pass a target. This used to in include --http_headers . I must now pass those arguments separately and run two scans To Reproduce Steps to reproduce the behavior:

  1. Install SSLyze using '...' [e.g. pip, git]
  2. Run the following command python3 sslyze -m www.ftd.com
  3. Note: no hsts or other header information
  4. Run the following command python3 sslyze -m --http_headers www.ftd.com
  5. Note: ONLY HSTS information is returned

I believe there used to be a --regular option to run all scans. It is ok not to have that as long as you maintain "umbrella check" operation.

Expected behavior All checks should be run as advertised Python environment (please complete the following information):

Additional context Add any other context about the problem here.